RFR: JDK-8308398 Move SunEC crypto provider into java.base

Anthony Scarpino ascarpino at openjdk.org
Mon Jun 19 16:44:12 UTC 2023


On Tue, 13 Jun 2023 20:36:28 GMT, Anthony Scarpino <ascarpino at openjdk.org> wrote:

> Hi,
> 
> I need a code review for moving the contents of the jdk.crypto.ec module into java.base.  This moves the SunEC JCE Provider (Elliptic Curve) into java.base.  EC has always been separate from the base module/pkg because of its dependence on a native library.  That library was removed in JDK 16.  An empty jdk.crypto.ec module will remain for compatibility, but marked as deprecated with the intent to be removed in a future release.
> 
> There should be no compatibility risk for application using EC through JCE. There are no public API changes to EC, XEC, and EdDSA classes .  Applications that unwisely accessing internal EC classes will need to use the java.base module.
> 
> Thanks
> 
> Tony

> 

TLS is mentioned in the CSR as a reason for the merger.  With EC not being in java.base and an alternative for RSA, it could lead to slimmed down, custom images not having the best crypto algorithms available moving in the future.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/14457#issuecomment-1597475346



More information about the security-dev mailing list