Mercurial > hg > openjdk > jdk8u > jdk

changeset 13705:5456f24496f4 jdk8u232-b09 jdk8u232-ga

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
8228825: Enhance ECDSA operations Reviewed-by: bae, bmathiske
author andrew
date Thu, 10 Oct 2019 04:21:07 +0100
parents 523d48606333
children 97c98d070451
files src/share/classes/sun/security/ssl/EllipticCurvesExtension.java
diffstat 1 files changed, 5 insertions(+), 14 deletions(-) [+]
line wrap: on
line diff
--- a/src/share/classes/sun/security/ssl/EllipticCurvesExtension.java	Thu Jan 17 10:44:17 2019 -0500
+++ b/src/share/classes/sun/security/ssl/EllipticCurvesExtension.java	Thu Oct 10 04:21:07 2019 +0100
@@ -168,20 +168,11 @@
                     "contains no supported elliptic curves");
             }
         } else {        // default curves
-            int[] ids;
-            if (requireFips) {
-                ids = new int[] {
-                    // only NIST curves in FIPS mode
-                    23, 24, 25, 9, 10, 11, 12, 13, 14,
-                };
-            } else {
-                ids = new int[] {
-                    // NIST curves first
-                    23, 24, 25, 9, 10, 11, 12, 13, 14,
-                    // non-NIST curves
-                    22,
-                };
-            }
+            int[] ids = new int[] {
+                // The three widely-used NIST curves:
+                // secp256r1, secp384r1 & secp521r1
+                23, 24, 25
+            };
 
             idList = new ArrayList<>(ids.length);
             for (int curveId : ids) {