Re: RFR: 8325448: Hybrid Public Key Encryption [v3]

2025-02-26 Thread Weijun Wang
> Implement HPKE as defined in https://datatracker.ietf.org/doc/rfc9180/. > > ![HPKEParameterSpec](https://github.com/user-attachments/assets/4f64567a-59b0-473e-8a3b-416565f5bca5) Weijun Wang has updated the pull request incrementally with one additional commit since the last revision: exampl

Re: JEP draft: PEM Encodings of Cryptographic Objects

2025-02-26 Thread Anthony Scarpino
Hi, PEMDecoder.decode(InputStream) will read and return a Certificate object. Subsequent calls to decode(InputStream) will continue to read from the stream and return Certificate objects until the stream ends. For encoding, PEMEncoder.encode(DEREncodable) will encode a Certificate object. W

Re: RFR: 8298420: PEM API: Implementation (Preview) [v12]

2025-02-26 Thread Anthony Scarpino
On Wed, 26 Feb 2025 14:14:56 GMT, Magnus Ihse Bursie wrote: > Sorry if I'm just jumping into this without having all the context, but maybe > it would be a good idea to update the `GenerateCacerts` build tool to use > this new API? That would mean free testing during build, and a chance to > "

Re: RFR: 8346129: Simplify EdDSA & XDH curve name usage [v3]

2025-02-26 Thread Sean Mullan
On Tue, 25 Feb 2025 20:24:16 GMT, Anthony Scarpino wrote: >> Hi, >> >> I need a review for the following change. Naming conventions for EdDSA and >> XDH have inconsistencies between DisabledAlgorithms and KeyPairGenerator. >> These internal changes help make it more consistent when parsing th

Re: RFR: 8346129: Simplify EdDSA & XDH curve name usage [v3]

2025-02-26 Thread Sean Mullan
On Fri, 21 Feb 2025 22:34:25 GMT, Weijun Wang wrote: >> `permits()` are used in situations for >> jdk[tls|certpath|jar].disabledAlgorithms, and the SSLAlgorithmConstraints. >> It's not called for APIs like KPG, Signature, etc. > > That's what I meant. Suppose in TLS when you verify a signature

Re: RFR: 8350459: MontgomeryIntegerPolynomialP256 multiply intrinsic with AVX2 on x86_64

2025-02-26 Thread Sandhya Viswanathan
On Thu, 20 Feb 2025 21:49:42 GMT, Volodymyr Paprotski wrote: > Add AVX2 montgomery multiplication intrinsic. (About 60-80% gain) > > Also add reduction to existing AVX512 multiplication (this was left-over from > https://github.com/openjdk/jdk/pull/19893 where a quick fix was required). > Thi

RFR: 8350710: Add GlobalSign Code Signing Root R45

2025-02-26 Thread Rajan Halade
This PR is to add new GlobalSign Code Signing Root R45. This CA has gone through https://www.oracle.com/java/technologies/javase/carootcertsprogram.html process. The release-note is at [JDK-8350805](https://bugs.openjdk.org/browse/JDK-8350805) - Commit messages: - 8350710: Add G

Re: RFR: 8348561: Add aarch64 intrinsics for ML-DSA [v7]

2025-02-26 Thread Andrew Dinn
On Wed, 26 Feb 2025 14:18:14 GMT, Ferenc Rakoczi wrote: >> By using the aarch64 vector registers the speed of the computation of the >> ML-DSA algorithms (key generation, document signing, signature verification) >> can be approximately doubled. > > Ferenc Rakoczi has updated the pull request i

Re: RFR: 8348561: Add aarch64 intrinsics for ML-DSA [v7]

2025-02-26 Thread Ferenc Rakoczi
> By using the aarch64 vector registers the speed of the computation of the > ML-DSA algorithms (key generation, document signing, signature verification) > can be approximately doubled. Ferenc Rakoczi has updated the pull request incrementally with two additional commits since the last revisio

Re: RFR: 8298420: PEM API: Implementation (Preview) [v12]

2025-02-26 Thread Magnus Ihse Bursie
On Thu, 12 Dec 2024 19:59:05 GMT, Anthony Scarpino wrote: >> Hi all, >> >> I need a code review of the PEM API. Privacy-Enhanced Mail (PEM) is a >> format for encoding and decoding cryptographic keys and certificates. It >> will be integrated into JDK24 as a Preview Feature. Preview featur

Integrated: 8345598: Upgrade NSS binaries for interop tests

2025-02-26 Thread Matthew Donovan
On Wed, 12 Feb 2025 19:28:18 GMT, Matthew Donovan wrote: > This is a trivial PR to update the version of NSS used for pkcs11 tests. This pull request has now been integrated. Changeset: 0f822681 Author:Matthew Donovan URL: https://git.openjdk.org/jdk/commit/0f82268134df65bbc65ecda15