-Djdk.nativeCrypto

This option controls the use of OpenSSL native cryptographic support.

Syntax

    -Djdk.nativeCrypto=[true|false]

Setting	value	Default
-Djdk.nativeCrypto	true	yes
-Djdk.nativeCrypto	false

Explanation

OpenSSL support is enabled by default for the Digest, CBC, GCM, RSA, ChaCha20 and ChaCha20-Poly1305, ECDH key agreement, EC key generation, XDH key agreement, and XDH key generation algorithms. If you want to turn off the OpenSSL implementation, set this option to false.

Restriction: The ChaCha20 and ChaCha20-Poly1305 algorithms are not supported on Java™ 8. The XDH key agreement and XDH key generation algorithms also are not supported on Java 8.

If you want to turn off the algorithms individually, use the following system properties:

• -Djdk.nativeCBC
• -Djdk.nativeChaCha20 ( Not supported on Java 8. )
• -Djdk.nativeGCM
• -Djdk.nativeRSA
• -Djdk.nativeDigest
• -Djdk.nativeEC
• -Djdk.nativeECKeyGen
• -Djdk.nativeXDHKeyAgreement
• -Djdk.nativeXDHKeyGen