JDK-8080704 : Support the retrieval of standard names for EC parameters
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Priority: P3
  • Status: Closed
  • Resolution: Won't Fix
  • Submitted: 2015-05-19
  • Updated: 2019-10-30
  • Resolved: 2019-10-30
Related Reports
Blocks :  
JDK-8226374 - Restrict TLS signature schemes and named groups
Relates :  
JDK-8208156 - Each JCE provider should document the EC curves that they support
Relates :  
JDK-8210755 - Define standard names for EC curves and TLS signature schemes
Relates :  
JDK-7007966 - Add Brainpool ECC support (RFC 5639)
Description
Internally, the JDK supports well-known names that identify the precomputed parameters associated with standardised elliptic curves. Currently there is no public API to retrieve that list which makes the java.security.spec.ECGenParameterSpec class awkward to use when generating the specification for an
elliptic curve.

Introduce a public API to retrieve the list of the standard names available for generating the (precomputed) elliptic curve domain parameters.

In addition, to promote wider EC adoption, the standardised Brainpool elliptic curves (RFC 5639)
should also be included in the list of standard names available via ECGenParameterSpec.


Note that the ability to generate the necessary parameters for a particular elliptic curve is no guarantee that
the curve is supported in any specific JCE provider. For example, the SunEC provider supports the
SEC2/NIST and ANSI X9.62 curves but not the Brainpool curves.
Comments
It may be not necessary to support the retrieval of standard named curves/algorithms. But it may be a good enhancement to use NamedParameterSpec rather then ECGenParameterSpec in our implementation.
10-07-2019