> The private key encoding formats of ML-KEM and ML-DSA are updated to match > the latest IETF drafts at: > https://datatracker.ietf.org/doc/html/draft-ietf-lamps-dilithium-certificates-11 > and > https://datatracker.ietf.org/doc/html/draft-ietf-lamps-kyber-certificates-10. > New security/system properties are introduced to determine which CHOICE a > private key is encoded when a new key pair is generated or when > `KeyFactory::translateKey` is called. > > Both the encoding and the expanded format are stored inside a `NamedPKCS8Key` > now. When loading from a PKCS #8 key, the expanded format is calculated from > the input if it's seed only.
Weijun Wang has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains five commits: - allow expanded to be null - merge - Merge - safer privKeyToPubKey; updated desciptions for the properties; adding braces to if blocks - the fix ------------- Changes: https://git.openjdk.org/jdk/pull/24969/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=24969&range=02 Stats: 2490 lines in 23 files changed: 1785 ins; 537 del; 168 mod Patch: https://git.openjdk.org/jdk/pull/24969.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/24969/head:pull/24969 PR: https://git.openjdk.org/jdk/pull/24969
