RFR: 8314323: Implement JEP 527: TLS 1.3 Hybrid Key Exchange [v3]

[Artur Barashev]

On Sun, 5 Oct 2025 12:21:02 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

>> src/java.base/share/classes/sun/security/ssl/NamedGroup.java line 316:
>> 
>>> 314:                 // Skip AlgorithmParameters for KEMs (not supported)
>>> 315:                 if (namedGroupSpec == NamedGroupSpec.NAMED_GROUP_KEM) {
>>> 316:                     if (defaultProviderName == null) {
>> 
>> We assume that if provider is not null then it must be DH without doing any checks to confirm that. It would be cleaner to call getProvider() instead.
>> 
>>> Provider p = getProvider();
>>                     if (p == null) {
>>                         KeyFactory.getInstance(name);
>>                     } else {
>>                         KeyFactory.getInstance(name, p);
>>                     }
>
> Done.

It's actually unchanged, do you plan to do it in the next iteration?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27614#discussion_r2430049480