提交 226051a0 编写于 作者: A andrew

8228825: Enhance ECDSA operations

Reviewed-by: bae, bmathiske
上级 e224ba67
...@@ -168,20 +168,11 @@ final class EllipticCurvesExtension extends HelloExtension { ...@@ -168,20 +168,11 @@ final class EllipticCurvesExtension extends HelloExtension {
"contains no supported elliptic curves"); "contains no supported elliptic curves");
} }
} else { // default curves } else { // default curves
int[] ids; int[] ids = new int[] {
if (requireFips) { // The three widely-used NIST curves:
ids = new int[] { // secp256r1, secp384r1 & secp521r1
// only NIST curves in FIPS mode 23, 24, 25
23, 24, 25, 9, 10, 11, 12, 13, 14, };
};
} else {
ids = new int[] {
// NIST curves first
23, 24, 25, 9, 10, 11, 12, 13, 14,
// non-NIST curves
22,
};
}
idList = new ArrayList<>(ids.length); idList = new ArrayList<>(ids.length);
for (int curveId : ids) { for (int curveId : ids) {
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册