Re: Undo deprecation of brainpool EC

2022-11-22 Thread Alexander Krumeich
Hi there! Brainpool curves are mandatory for products/projects in which the German government is a stakeholder. BSI Technical Guidelines require the use of brainpoolP256r1, brainpoolP384r1, and the brainpoolP512r1 that Benjamin already mentioned (thanks, Benjamin, for raising this issue). As for u

Re: Undo deprecation of brainpool EC

2022-11-20 Thread Xuelei Fan
Hi, As I’m working on this area recently, I will see if I can contribute. But it may be no easier than JDK 21. If you don’t mind, I may ask for more requirement details later and help for testing. Thanks, Xuelei > On Nov 15, 2022, at 11:23 PM, > wrote: > > Hi Xuelei and Sean, > > We use

Re: Undo deprecation of brainpool EC

2022-11-15 Thread benjamin.marwell
Hi Xuelei and Sean, We use/see mostly brainpoolP512r1. But it is not just us! > , although I will note that the IANA registry >still lists them as not recommended for TLS [1]. I agree that brainpoolP512r1 are not particularly interesting when it comes to TLS, but we still see server certif

Re: Undo deprecation of brainpool EC

2022-11-15 Thread Xuelei Fan
Hi Benjamin, May I ask what are the sizes of brainpool curves used in practice? Thank, Xuelei > On Nov 14, 2022, at 12:36 AM, benjamin.marw...@f-i.de wrote: > > Hello everyone! > > To our surprise, brainpool EC have been deprecated with Java 14+ [1]. > However, JDK-8234924 [1] does not add any

Re: Undo deprecation of brainpool EC

2022-11-15 Thread Sean Mullan
Hi, Thanks for your questions about brainpool. See below for more details. On 11/14/22 3:36 AM, benjamin.marw...@f-i.de wrote: Hello everyone! To our surprise, brainpool EC have been deprecated with Java 14+ [1]. However, JDK-8234924 [1] does not add any information on WHY they would have bee

Undo deprecation of brainpool EC

2022-11-14 Thread benjamin.marwell
Hello everyone! To our surprise, brainpool EC have been deprecated with Java 14+ [1]. However, JDK-8234924 [1] does not add any information on WHY they would have been deprecated. In fact, neither NIST (USA) nor BSI (Germany) list them as deprecated. On the contrary, both institutions list them a