On Tue, 1 Sep 2026 01:05:29 GMT, Weijun Wang <[email protected]> wrote:
> Use ML-KEM-768 and ML-DSA-65 as the default parameter sets for ML-KEM and > ML-DSA. This is the same as the default parameter sets chosen by > implementations from JDK's builtin SunJCE and SUN providers. > > Choose secp384r1 as the default curve for EC. This is the same as the curve > chosen by implementations from JDK's builtin SunEC provider when initialized > with a keysize of 384 bits. > > Define the default RSA and DSA key sizes directly in keytool instead of > sharing them with the JDK built-in providers. The hardcoded values are > consistent with those documented in the keytool man page. > > --------- > - [x] I confirm that I make this contribution in accordance with the [OpenJDK > Interim AI Policy](https://openjdk.org/legal/ai). This pull request has now been integrated. Changeset: f2259dcd Author: Weijun Wang <[email protected]> URL: https://git.openjdk.org/jdk/commit/f2259dcd24013c73f86539cea2cec57aea8de9b9 Stats: 369 lines in 5 files changed: 309 ins; 28 del; 32 mod 8391472: Make keytool key generation defaults provider-independent Reviewed-by: mullan, mpowers ------------- PR: https://git.openjdk.org/jdk/pull/32616
