Supporting SHA224WithECDSA

Michael StJohns mstjohns at comcast.net
Thu Aug 26 04:58:12 UTC 2010


Hi Tomas -

I think the current provider is a PKCS11 v2.20 based provider.  SHA224withECDSA is being added in v2.30.  I remember seeing someone mention an intention to do wholesale pass on PKCS11 to update to 2.30 at some point, but I don't think that's in progress yet.

A quick look at the current JDK7 has support for SHA224withECDSA in AlgorithmId.java already...

Mike



At 12:37 AM 8/26/2010, Tomas Gustavsson wrote:

>Hi,
>
>The PKCS#11 provider currently does not support SHA224WithECDSA, although this is becoming a popular algorithm.
>I have hacked it myself to support this and the patch is basically trivial. Is it possible to get this support in the JDK?
>
>It requires only trivial modifications to AgorithmId.java, P11Signature.java and SunPKCS11.java.
>
>Regards,
>Tomas





More information about the security-dev mailing list