Mercurial > hg > openjdk > jdk8u > jdk
changeset 13705:5456f24496f4 jdk8u232-b09 jdk8u232-ga
8228825: Enhance ECDSA operations
Reviewed-by: bae, bmathiske
author | andrew |
---|---|
date | Thu, 10 Oct 2019 04:21:07 +0100 |
parents | 523d48606333 |
children | 97c98d070451 |
files | src/share/classes/sun/security/ssl/EllipticCurvesExtension.java |
diffstat | 1 files changed, 5 insertions(+), 14 deletions(-) [+] |
line wrap: on
line diff
--- a/src/share/classes/sun/security/ssl/EllipticCurvesExtension.java Thu Jan 17 10:44:17 2019 -0500 +++ b/src/share/classes/sun/security/ssl/EllipticCurvesExtension.java Thu Oct 10 04:21:07 2019 +0100 @@ -168,20 +168,11 @@ "contains no supported elliptic curves"); } } else { // default curves - int[] ids; - if (requireFips) { - ids = new int[] { - // only NIST curves in FIPS mode - 23, 24, 25, 9, 10, 11, 12, 13, 14, - }; - } else { - ids = new int[] { - // NIST curves first - 23, 24, 25, 9, 10, 11, 12, 13, 14, - // non-NIST curves - 22, - }; - } + int[] ids = new int[] { + // The three widely-used NIST curves: + // secp256r1, secp384r1 & secp521r1 + 23, 24, 25 + }; idList = new ArrayList<>(ids.length); for (int curveId : ids) {