JDK-8140436 : Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 8u261,9
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2015-10-24
  • Updated: 2023-09-29
  • Resolved: 2017-05-10
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 10 JDK 6 JDK 7 JDK 8 JDK 9
10 b08Fixed 6-poolResolved 7-poolResolved 8u161Fixed 9.0.4Fixed
Related Reports
Blocks :  
Blocks :  
Blocks :  
Blocks :  
Relates :  
Relates :  
Relates :  
Sub Tasks
JDK-8173597 :  
JDK-8180135 :  
JDK-8244613 :  
Description
A new TLS extension, "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS" (FFDHE extension), was proposed:

    https://datatracker.ietf.org/doc/rfc7919/

We may want to consider to support FFDHE extension so that 2048+ bits DH can be the default preferable strength from JDK 6 to JDK 9.
Comments
This enhancement was subsequently backported to JDK 8u as part of the TLS 1.3 implementation: https://bugs.openjdk.org/browse/JDK-8196584
05-01-2023

URL: http://hg.openjdk.java.net/jdk10/jdk10/jdk/rev/87290d66b649 User: xuelei Date: 2017-05-10 23:42:59 +0000
10-05-2017

No API is planned. Plan to backport to previous releases.
21-10-2016