Re: Correction: Re: RFC8410 (in)compatibility

2020-08-29 Thread Weijun Wang
In JDK 15, a Signature.getInstance("Ed25519”) would also reject a key generated from KeyPairGenerator.getInstance("X25519”). It accepts a key from KeyPairGenerator.getInstance("Ed25519”). Thanks, Max > On Aug 29, 2020, at 10:14 AM, Anders Rundgren > wrote: > > The RFC8410 author claims that

Correction: Re: RFC8410 (in)compatibility

2020-08-29 Thread Anders Rundgren
The RFC8410 author claims that the public key featured in the "self-issued" certificate is NOT related to the signature key. The answer to my question is thus (?) that "Signature" should (as BC does) reject X25519 keys. All is good :-) Anders On 2020-08-28 16:07, Anders Rundgren wrote: On

Re: RFC8410 (in)compatibility

2020-08-28 Thread Anders Rundgren
On 2020-08-28 15:58, Weijun Wang wrote: Is “Ed25519” what you need? It’s not available in JDK 11. See https://bugs.openjdk.java.net/browse/JDK-8199231. I know, that's why I wrote that I currently use BC (BouncyCastle). My question is thus applicable to JDK 15. BC apparently rejects X25519

Re: RFC8410 (in)compatibility

2020-08-28 Thread Weijun Wang
Is “Ed25519” what you need? It’s not available in JDK 11. See https://bugs.openjdk.java.net/browse/JDK-8199231. —Max > On Aug 28, 2020, at 9:55 AM, Anders Rundgren > wrote: > > On 2020-08-28 15:41, Weijun Wang wrote: >> What version of java are you using and what’s your command to generate

Re: RFC8410 (in)compatibility

2020-08-28 Thread Anders Rundgren
On 2020-08-28 15:41, Weijun Wang wrote: What version of java are you using and what’s your command to generate the key pair? Hi Max, While waiting for JDK 15, I'm currently using JDK11 and BC but the question is really about the Signature object specification. KeyPairGenerator kpg =

Re: RFC8410 (in)compatibility

2020-08-28 Thread Weijun Wang
What version of java are you using and what’s your command to generate the key pair? Thanks, Max > On Aug 28, 2020, at 7:03 AM, Anders Rundgren > wrote: > > Hi Crypto Experts, > > Please pardon my ignorance regarding curve25519, but I ran into problems [*] > trying to recreate the sample

RFC8410 (in)compatibility

2020-08-28 Thread Anders Rundgren
Hi Crypto Experts, Please pardon my ignorance regarding curve25519, but I ran into problems [*] trying to recreate the sample certificate: https://tools.ietf.org/html/rfc8410#section-10.2 It seems that the certificate is signed with a key intended for ECDH. Question: is Java's "Signature"