RFR: 8298390: Implementing ML-KEM key encapsulation mechanism [v11]

Weijun Wang weijun at openjdk.org
Thu Nov 7 00:47:39 UTC 2024


On Wed, 6 Nov 2024 00:00:50 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

>> Ben Perez has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Added key validity checks to ML_KEM_Provider
>
> src/java.base/share/classes/sun/security/util/KnownOIDs.java line 319:
> 
>> 317:     ML_KEM_512("1.3.6.1.4.1.22554.5.6.1", "ML-KEM-512"),
>> 318:     ML_KEM_768("1.3.6.1.4.1.22554.5.6.2", "ML-KEM-768"),
>> 319:     ML_KEM_1024("1.3.6.1.4.1.22554.5.6.3", "ML-KEM-1024"),
> 
> Where are these OIDs from? It seems that NIST has different OIDs assigned to ML-KEM: https://csrc.nist.gov/projects/computer-security-objects-register/algorithm-registration#KEM

Fixed.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/21478#discussion_r1831898794


More information about the security-dev mailing list