RFR: 8349732: Add support for JARs signed with ML-DSA [v12]
Sean Mullan
mullan at openjdk.org
Thu Nov 6 20:20:07 UTC 2025
On Wed, 5 Nov 2025 14:32:51 GMT, Weijun Wang <weijun at openjdk.org> wrote:
>> Add support for ML-DSA signing of JAR files.
>>
>> ~Note: https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-ml-dsa/ is not finalized.~
>>
>> Update: it is published as https://datatracker.ietf.org/doc/rfc9882/.
>
> Weijun Wang has updated the pull request incrementally with two additional commits since the last revision:
>
> - rename DataFecther to RepositoryFileReader
> - more comments for DataFetcher
I think it would also be useful to add or extend an existing test and test that the ML-DSA algorithms are disabled if set in the `jdk.jar.disabledAlgorithms` security property.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/26563#issuecomment-3499231991
More information about the security-dev
mailing list