On Mon, 19 Oct 2026 07:53:51 GMT, Hai-May Chao <[email protected]> wrote:
> This feature enables SunJSSE to use a TLS 1.3 hybrid named group implemented > directly by a security provider as JCA `KeyPairGenerator` and `KEM` services. > It also moves the JDK implementations of `X25519MLKEM768`, SecP256r1MLKEM768, > and `SecP384r1MLKEM1024` into SunJCE provider. > > --------- > - [X] I confirm that I make this contribution in accordance with the [OpenJDK > Interim AI Policy](https://openjdk.org/legal/ai). src/java.base/share/classes/com/sun/crypto/provider/SunJCE.java line 770: > 768: "|java.security.interfaces.XECKey"); > 769: ps("KEM", "DHKEM", "com.sun.crypto.provider.DHKEM", null, attrs); > 770: ps("KEM", "DH", "sun.security.ssl.DHasKEM", null, attrs); Do we really want to expose `KEM.DH` to the public? ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/33433#discussion_r4313963600
