JDK-8204836 : Add Brainpool ECC support (RFC 5639)
  • Type: CSR
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Priority: P3
  • Status: Closed
  • Resolution: Approved
  • Fix Versions: 11
  • Submitted: 2018-06-12
  • Updated: 2022-12-14
  • Resolved: 2018-06-22
Related Reports
CSR :  
JDK-7007966 - Add Brainpool ECC support (RFC 5639)
Relates :  
JDK-8298721 - Elliptic Curve Cryptography (ECC) Brainpool curves
Description
Summary
-------
Enhance SunEC provider with the support of Brainpool256/320/384/512r1 curves 

Problem
-------
No providers in OpenJDK supports any of the Brainpool curves in RFC 5639 which are used by many ePassport deployments in Europe.

Solution
--------
Enhanced SunEC provider to support Brainpool256/320/384/512r1 curves. 

Specification
-------------
No public API changes. All sources changes are in SunEC provider codebase, i.e. inside jdk.crypto.ec module. The webrev (webrev7007966.zip) is attached to this CSR.
Comments
[~darcy] The standard names for EC Curves is currently an open issue, see https://bugs.openjdk.java.net/browse/JDK-8080704 for more information. However, I also think each JCE provider should list the curves that it supports, so I will file a bug for that.
24-07-2018
It seems odd the list of supported EC curves isn't mentioned somewhere, but I'll vote to Approve the request if that is the existing practice.
22-06-2018
I checked Standard Algorithm Names doc and security providers guide, it seems that existing doc on SunEC provider does not mention or list supported EC curves.
22-06-2018
There is no security guide or spec that should be updated as part of this work?
21-06-2018
Please add a reviewer before finalizing the request. I assume some other JDK-specific crypto documentation would be updated to list these algorithms as supported.
13-06-2018