Version 11.0.18.0
Learn about the new features and functions available with this release.
This refresh contains the latest IBM® fixes, the most recent OpenJDK level, and the following new features.
- OpenJ9 features
- This release contains features from the latest release of the Eclipse OpenJ9 project, as listed in the Version 0.36.x OpenJ9 user documentation.
- Other features
- This release contains the following new features.
- IBMJCECCA interoperability with SunPKCS11
- You can create secure or sensitive keys by using the SunPKCS11 security provider. These keys can
be passed to the IBMJCECCA provider to sign and validate. The following IBMJCECCA signature classes
now support SunPKCS11 Keys:
DatawithECDSA
DatawithRSA
MD2withRSA
MD5withRSA
RSA
SHAnwithECDSA
(for example,SHA1withECDSA
,SHA2withECDSA
,SHA3withECDSA
)SHAnwithRSA
(for example,SHA1withRSA
,SHA2withRSA
,SHA3withRSA
)
- PKCS11 keystore support added to the
hwkeytool
application - Use the IBMJCECCA application
hwkeytool
to create PKCS11 keystores and keys. For more information, see thehwkeytool
documentation.
- RSA-PSS support for the IBMJCECCA provider
- Support is added for RSA-PSS signing and validation by using the IBMJCECCA provider. The new service is based on the ICSF Probabilistic Signature Scheme (PSS) cryptographic service. RSA-PSS is a cryptographic signature schema that uses RSA key pairs and PSS signature schema. This service uses hardware-based RSA keys to call and operate ICSF PSS service. Along with the RSA-PSS signature schema, the related keys and services such as RSA public and private keys, all types of keystores, RSA key factory, and RSA key pair generator services are extended to support RSA-PSS key types. For more information, see hwkeytool - Key and Certificate Management Tool.