Version 11.0.18.0

Learn about the new features and functions available with this release.

This refresh contains the latest IBM® fixes, the most recent OpenJDK level, and the following new features.

OpenJ9 features
This release contains features from the latest release of the Eclipse OpenJ9 project, as listed in the Version 0.36.x OpenJ9 user documentation.
Other features
This release contains the following new features.
IBMJCECCA interoperability with SunPKCS11
You can create secure or sensitive keys by using the SunPKCS11 security provider. These keys can be passed to the IBMJCECCA provider to sign and validate. The following IBMJCECCA signature classes now support SunPKCS11 Keys:
  • DatawithECDSA
  • DatawithRSA
  • MD2withRSA
  • MD5withRSA
  • RSA
  • SHAnwithECDSA (for example, SHA1withECDSA, SHA2withECDSA, SHA3withECDSA)
  • SHAnwithRSA (for example, SHA1withRSA, SHA2withRSA, SHA3withRSA)
For more information, see the IBMJCECCA documentation and the IBMJCECCA API documentation.
PKCS11 keystore support added to the hwkeytool application
Use the IBMJCECCA application hwkeytool to create PKCS11 keystores and keys. For more information, see the hwkeytool documentation.
RSA-PSS support for the IBMJCECCA provider
Support is added for RSA-PSS signing and validation by using the IBMJCECCA provider. The new service is based on the ICSF Probabilistic Signature Scheme (PSS) cryptographic service. RSA-PSS is a cryptographic signature schema that uses RSA key pairs and PSS signature schema. This service uses hardware-based RSA keys to call and operate ICSF PSS service. Along with the RSA-PSS signature schema, the related keys and services such as RSA public and private keys, all types of keystores, RSA key factory, and RSA key pair generator services are extended to support RSA-PSS key types. For more information, see hwkeytool - Key and Certificate Management Tool.