RFR: 8349732: Add support for JARs signed with ML-DSA [v12]

Sean Mullan mullan at openjdk.org
Thu Nov 6 20:20:07 UTC 2025


On Wed, 5 Nov 2025 14:32:51 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> Add support for ML-DSA signing of JAR files.
>> 
>> ~Note: https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-ml-dsa/ is not finalized.~
>> 
>> Update: it is published as https://datatracker.ietf.org/doc/rfc9882/.
>
> Weijun Wang has updated the pull request incrementally with two additional commits since the last revision:
> 
>  - rename DataFecther to RepositoryFileReader
>  - more comments for DataFetcher

I think it would also be useful to add or extend an existing test and test that the ML-DSA algorithms are disabled if set in the `jdk.jar.disabledAlgorithms` security property.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/26563#issuecomment-3499231991


More information about the security-dev mailing list