Only select NewSunX509, an X509KeyManager implementation in the SunJSSE provider, if your application explicitly requires support for multiple and dynamic keystores, for example, a server that provides Server Name Indication (SNI) support. See Multiple and Dynamic Keystores in Java Platform, Standard Edition Security Developer's Guide for more information.

The performance of the elliptic curve key pair generation algorithm provided by Jipher varies depending on the elliptic curve.

Among the curves supported by Jipher, the National Security Agency (NSA) recommends the use of the secp384r1 curve; refer to the Commercial National Security Algorithm (CSNA) Suite 1.0. However, the secp256r1 curve also supported by Jipher provides better performance. See Supported Elliptic Curve Names.