JDK-8242068 : Signed JAR support for RSASSA-PSS and EdDSA
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2020-04-03
  • Updated: 2021-07-07
  • Resolved: 2020-10-21
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 16
16 b21Fixed
Related Reports
CSR :  
Duplicate :  
Relates :  
Relates :  
Relates :  
Relates :  
Sub Tasks
JDK-8247837 :  
JDK-8255132 :  
Description
We need to support RSASSA-PSS (https://tools.ietf.org/html/rfc4056) and EdDSA (https://www.rfc-editor.org/rfc/rfc8419.html) for jar signing. This would include:

0. Decide the proper block type name: "RSASSA-PSS" is a little long, "EdDSA" contains a lowercase letter.
1. Support new block types in SignatureFileVerifier.java
2. Translate between sigAlg and encAlg/digestAlg in AlgorithmId.java
3. Support for SHAKE256 name and OID in AlgorithmId.java
4. Updates to jarsigner tooldoc and JAR file spec
5. Tests
Comments
Changeset: 839f01dd Author: Weijun Wang <weijun@openjdk.org> Date: 2020-10-21 14:18:43 +0000 URL: https://git.openjdk.java.net/jdk/commit/839f01dd
21-10-2020