RFR: 8298127: HSS/LMS Signature Verification [v5]

Sean Mullan mullan at openjdk.org
Mon May 8 16:19:36 UTC 2023


On Tue, 2 May 2023 21:43:19 GMT, Ferenc Rakoczi <duke at openjdk.org> wrote:

>> Implement support for Leighton-Micali Signatures (LMS) as described in RFC 8554. LMS is an approved software signing algorithm for CNSA 2.0, with SHA-256/192 parameters recommended.
>
> Ferenc Rakoczi has updated the pull request incrementally with one additional commit since the last revision:
> 
>   adding key translation, finally block, removing 24-byte LMOTS parameters

src/java.base/share/classes/sun/security/provider/HSS.java line 229:

> 227: 
> 228:     static class LMSUtils {
> 229:         public final static int LMS_RESERVED = 0;

The statics and methods of `LMSUtils` can all be package-private.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/13691#discussion_r1187500905



More information about the security-dev mailing list