8379515: draft-ietf-lamps-kyber-certificates is now RFC 9935

Backport-of: 375f821

Author: Roland Mesde

src/java.base/share/classes/sun/security/util/KeyChoices.java

@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2025, Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 2025, 2026, Oracle and/or its affiliates. All rights reserved.
  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
  *
  * This code is free software; you can redistribute it and/or modify it
@@ -45,7 +45,7 @@
  * </pre>
  * This class supports reading, writing, and converting between them.
  * <p>
- * Current code follows draft-ietf-lamps-kyber-certificates-11 and RFC 9881.
+ * Current code follows RFC 9935 and RFC 9881.
  */
 public final class KeyChoices {
 

src/java.base/share/conf/security/java.security

@@ -1675,7 +1675,7 @@ com.sun.security.allowedAIALocations=
 #
 # PKCS #8 encoding format for newly created ML-KEM and ML-DSA private keys
 #
-# draft-ietf-lamps-kyber-certificates-11 and RFC 9881 define three possible formats for a private key:
+# RFC 9935 and RFC 9881 define three possible formats for a private key:
 # a seed (64 bytes for ML-KEM, 32 bytes for ML-DSA), an expanded private key,
 # or a sequence containing both.
 #

test/jdk/sun/security/provider/pqc/PrivateKeyEncodings.java

@@ -26,7 +26,7 @@
  * @bug 8347938
  * @library /test/lib
  * @summary ensure ML-KEM and ML-DSA encodings consistent with
- *      draft-ietf-lamps-kyber-certificates-11 and RFC 9881
+ *      RFC 9935 and RFC 9881
  * @modules java.base/com.sun.crypto.provider
  *          java.base/sun.security.pkcs
  *          java.base/sun.security.provider
@@ -62,17 +62,17 @@
 public class PrivateKeyEncodings {
 
     public static void main(String[] args) throws Exception {
-        // Example keys and certificates draft-ietf-lamps-kyber-certificates-11, Appendix B
-        // (https://datatracker.ietf.org/doc/html/draft-ietf-lamps-kyber-certificates-11#autoid-17)
-        // and RFC 9881, Appendix C.3
-        // (https://datatracker.ietf.org/doc/html/rfc9881#name-example-certificates)
+        // Example keys and certificates in RFC 9935, Appendix C
+        // (https://datatracker.ietf.org/doc/html/rfc9935#name-examples)
+        // and RFC 9881, Appendix C
+        // (https://datatracker.ietf.org/doc/html/rfc9881#name-examples)
         //
         // These data can be retrieved from the following GitHub releases:
         //   https://github.com/lamps-wg/kyber-certificates/releases/tag/draft-ietf-lamps-kyber-certificates-11
         //   https://github.com/lamps-wg/dilithium-certificates/releases/tag/draft-ietf-lamps-dilithium-certificates-13
         //
         // Although the release tags include "draft", these values are the
-        // same as those in the final RFC 9881.
+        // same as those in the final RFCs.
         try (var kemReader = RepositoryFileReader.of(RepositoryFileReader.KYBER_CERTIFICATES.class,
                     "kyber-certificates-draft-ietf-lamps-kyber-certificates-11/");
              var dsaReader = RepositoryFileReader.of(RepositoryFileReader.DILITHIUM_CERTIFICATES.class,