-
Type:
Enhancement
-
Resolution: Unresolved
-
Priority:
P4
-
None
-
Affects Version/s: 27
-
Component/s: security-libs
-
None
During review of JDK-8373408, I question the necessity of EC support checking in JSSE. Callers of `JsseJCE.isECAvailable()` reference incomplete support by EC providers (SignatureScheme.java:283).
A check makes sense when EC had copyright issues; however, EC is everywhere, XDH and EdDSA are popular, and we are moving toward PQC.
With SunEC part of the java.base module, there is not concern about a default lack of support. With other algorithms used by JSSE that are not checked, it appears this check is a relic.
A check makes sense when EC had copyright issues; however, EC is everywhere, XDH and EdDSA are popular, and we are moving toward PQC.
With SunEC part of the java.base module, there is not concern about a default lack of support. With other algorithms used by JSSE that are not checked, it appears this check is a relic.