On Wed, 4 Nov 2026 00:53:44 GMT, Hai-May Chao <[email protected]> wrote:
>> This feature enables SunJSSE to use a TLS 1.3 hybrid named group implemented >> directly by a security provider as JCA `KeyPairGenerator` and `KEM` >> services. It also moves the JDK implementations of `X25519MLKEM768`, >> SecP256r1MLKEM768, and `SecP384r1MLKEM1024` into SunJCE provider. >> >> --------- >> - [X] I confirm that I make this contribution in accordance with the >> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai). > > Hai-May Chao has updated the pull request incrementally with one additional > commit since the last revision: > > Update with Weijun's comments src/java.base/share/classes/sun/security/ssl/NamedGroup.java line 306: > 304: if (namedGroupSpec == NamedGroupSpec.NAMED_GROUP_KEM) { > 305: KeyPairGenerator.getInstance(name); > 306: KEM.getInstance(name); Instead of instantiating `KeyPairGenerator` and `KEM` and catching exceptions, can we instead skip these if the name is a hybrid alg? ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/33433#discussion_r4467687877
