JCA design for RFC 7748

2017-08-07 Thread Adam Petcher
I'm working on the Java implementation of RFC 7748 (Diffie-Hellman with X25519 and X448). I know some of you have been anxious to talk about how this would fit into JCA, and I appreciate your patience while I learned enough about JCA and existing crypto implementations to develop this API propo

Re: JCA design for RFC 7748

2017-08-07 Thread Michael StJohns
On 8/7/2017 4:37 PM, Adam Petcher wrote: I'm working on the Java implementation of RFC 7748 (Diffie-Hellman with X25519 and X448). I know some of you have been anxious to talk about how this would fit into JCA, and I appreciate your patience while I learned enough about JCA and existing crypto

[10] RFR 8185934: keytool shows "Signature algorithm: SHA1withECDSA, -1-bit key"

2017-08-07 Thread Weijun Wang
Please review this trivial fix at http://cr.openjdk.java.net/~weijun/8185934/webrev.00/ KeyUtil.getSize() are also called elsewhere when they key is weak, where key length is not -1. Noreg-trivial. Thanks Max

Re: JCA design for RFC 7748

2017-08-07 Thread Anders Rundgren
On 2017-08-07 23:52, Michael StJohns wrote: On 8/7/2017 4:37 PM, Adam Petcher wrote: These two assumptions greatly simplify the API. We won't need classes that mirror ECParameterSpec, EllipticCurve, ECPoint, ECField, ECPublicKey, etc. for X25519/X448. That assumption holds only if your vario