Allow Specifying Alternative SignerInfo.digestAlgorithm in JAR Signing

XMLWordPrintable

    • Type: Enhancement
    • Resolution: Unresolved
    • Priority: P4
    • None
    • Affects Version/s: None
    • Component/s: security-libs
    • None

      The signature in a signed JAR is represented by a PKCS #7 SignedData structure. Within its SignerInfo, the digestAlgorithm field specifies the algorithm to hash signed attributes. Its strength should match that of the signature algorithm. Previously. this algorithm was determined by the signature algorithm. However, with ML-DSA support as defined in RFC 9882, a single ML-DSA parameter set can work with multiple digest algorithms. To support this flexibility, a new `JarSigner.Builder` method and a correspondent `jarsigner` option are needed to allow users choose their preferred digest algorithm.

            Assignee:
            Unassigned
            Reporter:
            Weijun Wang
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: