RFR: 8298127: HSS/LMS Signature Verification [v7]

Ferenc Rakoczi duke at openjdk.org
Tue May 9 12:45:47 UTC 2023


On Mon, 8 May 2023 20:14:01 GMT, Mark Powers <mpowers at openjdk.org> wrote:

>> src/java.base/share/classes/sun/security/provider/HSS.java line 240:
>> 
>>> 238:         public final static int LMS_SHA256_M32_H20 = 8;
>>> 239:         public final static int LMS_SHA256_M32_H25 = 9;
>>> 240:         public final static int LMS_SHA256_M24_H5 = 10;
>> 
>> Shall we remove the SHA256_M24 and SHAKE constants at the moment?
>
> I think unused code is a distraction. That said, SHA256_M24 used to work. Can't we be better than BC and support M24?

I have removed everything that is not SHA-256, but kept a version of the code that has all those removed things so that in case we decide to put it back, it will be there in my work tree.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/13691#discussion_r1188533796



More information about the security-dev mailing list