On Fri, 30 Oct 2026 08:05:56 GMT, Hai-May Chao <[email protected]> wrote:
>> This feature enables SunJSSE to use a TLS 1.3 hybrid named group implemented >> directly by a security provider as JCA `KeyPairGenerator` and `KEM` >> services. It also moves the JDK implementations of `X25519MLKEM768`, >> SecP256r1MLKEM768, and `SecP384r1MLKEM1024` into SunJCE provider. >> >> --------- >> - [X] I confirm that I make this contribution in accordance with the >> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai). > > Hai-May Chao has updated the pull request incrementally with one additional > commit since the last revision: > > Remove unused adapter from DHasKEM src/java.base/share/classes/sun/security/ssl/NamedGroup.java line 361: > 359: } > 360: > 361: Provider getHybridKEMProvider() { Still don't know why this is required. Why not just call `KeyPairGenerator.getInstance(alg)` and `KEM.getInstance(alg)` directly? Are you worried they come from different providers? Even so, delayed provider selection should take care of it. ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/33433#discussion_r4423587154
