RFR: 8360564: Implement JEP 524: PEM Encodings of Cryptographic Objects (Second Preview) [v4]

Sean Mullan mullan at openjdk.org
Fri Oct 17 15:12:18 UTC 2025


On Tue, 14 Oct 2025 22:57:32 GMT, Anthony Scarpino <ascarpino at openjdk.org> wrote:

>> Ok, but is it really common? All the others are listed in RFC 7468 but not this one.
>
> Yes, it is the PKCS#1 standard.  RSA PRIVATE KEY was an OpenSSL standard for a long time and only recently changed to PRIVATE KEY.   MacOS (15.7.1), which is LibreSSL, still uses RSA PRIVATE KEY by default.   It's probably used more often than half of the above list.

I still think since it was never part of an official RFC or standard that we can point to, it should not be in the main part of the javadoc, but in the implementation note, which gives us more flexibility if we ever want to phase out support for it.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27147#discussion_r2440338434


More information about the security-dev mailing list