Don't offer arbitrary_explicit_* curves in default clients

ecsec · Sep 17, 2013 · 1231bf2 · 1231bf2
1 parent c981987
commit 1231bf2
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/core/src/main/java/org/bouncycastle/crypto/tls/AbstractTlsClient.java b/core/src/main/java/org/bouncycastle/crypto/tls/AbstractTlsClient.java
@@ -117,8 +117,7 @@ public Hashtable getClientExtensions()
              * TODO Could just add all the curves since we support them all, but users may not want
              * to use unnecessarily large fields. Need configuration options.
              */
-            this.namedCurves = new int[]{ NamedCurve.secp256r1, NamedCurve.secp384r1,
-                NamedCurve.arbitrary_explicit_prime_curves, NamedCurve.arbitrary_explicit_char2_curves };
+            this.namedCurves = new int[]{ NamedCurve.secp256r1, NamedCurve.secp384r1 };
             this.clientECPointFormats = new short[]{ ECPointFormat.uncompressed,
                 ECPointFormat.ansiX962_compressed_prime, ECPointFormat.ansiX962_compressed_char2, };