On 6/19/23 2:19 AM, Alan Bateman wrote:
On Mon, 19 Jun 2023 05:46:34 GMT, Anthony Scarpino <ascarp...@openjdk.org>
wrote:
From what I was told, the native library was one of the reasons it was not in
the base pkg before modularization and just remained so afterwards.
Maybe you are thinking about the size of libsunec or non-technical issues that
meant it wasn't included by some distributions? There weren't an issue with
deciding which providers to include to java.base. I think the motivation for
having the SunEC provider in java.base now is probably TLS so there are more
secure cipher suites available for those that create a small run-image with
jlink and don't include all security providers.
Yes, I think the motivation is more that Elliptic Curve Cryptography is
a widely used form of crypto and should be in java.base. I haven't tried
this, but I think TLS 1.3 would simply not work if you just had
java.base in your runtime.
--Sean
