RFR: 8284926: Share the certificate NamedGroup in SignatureScheme::getSignerOfPreferableAlgorithm

Xue-Lei Andrew Fan xuelei at openjdk.java.net
Sun Apr 17 15:04:30 UTC 2022


On Sat, 16 Apr 2022 13:59:25 GMT, John Jiang <jjiang at openjdk.org> wrote:

> It would not to generate the certificate's ECParameterSpec and NamedGroup multiple times in method `SignatureScheme::getSignerOfPreferableAlgorithm`.

src/java.base/share/classes/sun/security/ssl/SignatureScheme.java line 479:

> 477:         NamedGroup namedGroup = params != null
> 478:                 ? NamedGroup.valueOf(params) : null;
> 479: 

X509Possession.java might be a better place for the update, by caching  the named group of the private key.

-------------

PR: https://git.openjdk.java.net/jdk/pull/8271



More information about the security-dev mailing list