RFR: 8297878: KEM: Implementation [v2]

[Weijun Wang]

On Thu, 13 Apr 2023 22:29:34 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> The KEM API and DHKEM impl. Note that this PR uses new methods in https://github.com/openjdk/jdk/pull/13250.
>
> Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:
> 
>   spec change, getAlgorithm

> _Mailing list message from [Stephen Farrell](mailto:stephen.farrell at cs.tcd.ie) on [security-dev](mailto:security-dev at mail.openjdk.org):_
> 
> Hi,
> 
> Apologies for the interruption from the sidelines but I have a query if that's ok.
> 
> Is there any relationship between this work and RFC1980 which defines HPKE, being a way of encrypting to a public value using a KEM?

We know about HPKE, and it can makes use of the DHKEM implementation here (if the AuthEncap/AuthDecap functions are not used). However, we (Oracle's Java SE Security Team) don't have a plan to include HPKE inside OpenJDK yet.

This PR is mainly about adding the KEM SPI so 3rd security providers can implement other KEM algorithms. DHKEM is included mainly to prove that the API is usable.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/13256#issuecomment-1507688812