JDK-7044060 : Need to support NSA Suite B Cryptography algorithms

Type:Enhancement
Component:security-libs
Sub-Component:java.security
Affected Version:7,8

Priority:P3
Status:Closed
Resolution:Fixed
OS:generic
CPU:generic

Submitted:2011-05-11
Updated:2023-11-29
Resolved:2012-09-11

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

JDK 6	JDK 7	JDK 8	Other
6u171Fixed	7u131Fixed	8 b56Fixed	openjdk7uFixed

Related Reports

Blocks :	JDK-8153091 - Support SHA224withDSA and SHA256withDSA in the SunJSSE provider
Duplicate :	JDK-6521495 - Lift 1024-bit long prime restriction on Diffie-Hellman
Duplicate :	JDK-7163501 - Upgrade DSA support in the Sun provider to FIPS 186-3
Duplicate :	JDK-6560751 - Update DSA implementation according to FIPS 186-3
Relates :	JDK-8062834 - Allow DHKeyPair generation for bit lengths > 1024 in 6u, 7u
Relates :	JDK-6956398 - make ephemeral DH key match the length of the certificate key
Relates :	JDK-4963723 - Implement SHA-224
Relates :	JDK-8046119 - JEP 129: NSA Suite B Cryptographic Algorithms
Relates :	JDK-8049321 - Support SHA224withDSA and SHA256withDSA in the SunJSSE provider
Relates :	JDK-8272391 - Undeleted debug information
Relates :	JDK-8050374 - More Signature tests
Relates :	JDK-8039921 - SHA1WithDSA with key > 1024 bits not working
Relates :	JDK-8308474 - DSA does not reset SecureRandom when initSign is called again

Sub Tasks

JDK-8186290 :

Release Note: Add support for the SHA224withDSA and SHA256withDSA signature algorithms and DSA keys with sizes up to 2048 bits - Closed

Description

Add support for Suite B algorithms as defined here: http://www.nsa.gov/ia/programs/suiteb_cryptography/

Comments

UR SQE OK to take the jdk7 backport to CPU17_01. UR SQE is NOT OK to take the jdk6 backport to CPU17_01. We are requesting to delay jdk6 backport for SuiteB till Apr CPU to give the code some time to bake. So, UR SQE approval is to integrate the fix in jdk7u131 only.
15-11-2016
One more issue should be backported: JDK-7196805
16-09-2016
This enhancement is requested just before the ATR. SQE is not ready to take it - new test development is needed. What is a justification to take it in CPU16_04?
25-07-2016
Changeset: http://hg.openjdk.java.net/jdk8u/jdk8u-dev/jdk/rev/e129833555f6
29-02-2016
Verfied based on nighlty runs of the new tests in aurora
22-01-2013
Because the issue JDK-6521495 has been closed as duplicate of this one I've added a keyword sqebug to get the failures of the following test matched in Aurora reports: JSSE/TLS11Context/TestSSL_Https_Client_MikesToolBox_dot_Org_TLSv1/testSSL_Https_Client
18-12-2012
EVALUATION Will fix.
05-09-2012