34 Commits

Author SHA1 Message Date
Joe Darcy
7326481143 8274393: Suppress more warnings on non-serializable non-transient instance fields in security libs
Reviewed-by: weijun
2021-09-30 17:39:05 +00:00
Jamil Nimeh
29e0f1386d 8272385: Enforce ECPrivateKey d value to be in the range [1, n-1] for SunEC provider
Reviewed-by: ascarpino, weijun
2021-09-02 17:54:08 +00:00
Weijun Wang
6765f90250 8266459: Implement JEP 411: Deprecate the Security Manager for Removal
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: erikj, darcy, chegar, naoto, joehw, alanb, mchung, kcr, prr, lancea
2021-06-02 11:57:31 +00:00
Weijun Wang
f834557ae0 8258915: Temporary buffer cleanup
Reviewed-by: valeriep
2021-04-22 18:11:43 +00:00
Alex Blewitt
ebbce91e79 8264681: Use the blessed modifier order in java.security
Reviewed-by: mullan, shade
2021-04-14 06:01:00 +00:00
Xue-Lei Andrew Fan
177bc84fe8 8264606: More comment for ECDH public key validation
Reviewed-by: wetmore
2021-04-02 15:23:23 +00:00
Anthony Scarpino
374272fd13 8261502: ECDHKeyAgreement: Allows alternate ECPrivateKey impl and revised exception handling
Reviewed-by: jnimeh
2021-03-25 19:18:44 +00:00
Ziyi Luo
a777e82cd8 8254717: isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards
Reviewed-by: jnimeh
2021-03-04 15:17:53 +00:00
Anthony Scarpino
fb206908b4 8253637: Update EC removal
Reviewed-by: mullan
2020-09-29 18:05:20 +00:00
Anthony Scarpino
0b83fc0150 8235710: Remove the legacy elliptic curves
Reviewed-by: xuelei, erikj
2020-09-25 02:40:36 +00:00
Valerie Peng
40206822f4 8172366: Support SHA-3 based signatures
Enhance default JDK providers including SUN, SunRsaSign, and SunEC, with signatures using SHA-3 family of digests.

Reviewed-by: xuelei
2020-09-15 20:28:48 +00:00
Weijun Wang
507816d550 8244565: Accept PKCS #8 with version number 1
Reviewed-by: valeriep
2020-06-05 07:53:50 +08:00
Weijun Wang
bcbe46b0b3 8246397: Use KnownOIDs for known OIDs
Reviewed-by: xuelei
2020-06-04 10:04:32 +08:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Anthony Scarpino
fd28aad72d 8166597: Crypto support for the EdDSA Signature Algorithm
Reviewed-by: weijun, mullan, wetmore
2020-05-18 09:42:52 -07:00
Anthony Scarpino
b0245c2b54 8237219: Disable native SunEC implementation by default
Reviewed-by: weijun, mullan
2020-03-25 12:41:14 -07:00
Weijun Wang
533649b8ca 8237218: Support NIST Curves verification in java implementation
Reviewed-by: ascarpino
2020-02-22 08:10:21 +08:00
Xue-Lei Andrew Fan
4e430ffbb6 8239264: Clearup the legacy ObjectIdentifier constructor from int array
Reviewed-by: jnimeh
2020-02-17 18:52:50 -08:00
Weijun Wang
010ac54044 8236070: Backout fix for JDK-8234465
Reviewed-by: mullan
2019-12-17 20:56:53 +08:00
Weijun Wang
31b07b21ae 8234465: Encoded elliptic curve private keys should include the public point
Reviewed-by: xuelei
2019-12-17 09:38:30 +08:00
Valerie Peng
175faeeadf 8225745: NoSuchAlgorithmException exception for SHA256withECDSA with RSASSA-PSS support
Fixed SignatureUtil and ECDSA signature impl to handle EC parameters

Reviewed-by: weijun
2019-07-11 20:11:47 +00:00
Bradford Wetmore
118fd65d44 8171279: Support X25519 and X448 in TLS
Reviewed-by: xuelei, mullan
2019-06-12 18:58:00 -07:00
Adam Petcher
95b189916f 8147502: Digest is incorrectly truncated for ECDSA signatures when the bit length of n is less than the field size
Truncate the digest according to the group order, not the field size

Reviewed-by: jnimeh
2019-03-19 15:18:35 -04:00
Ivan Gerasimov
db89805fe0 8217344: Make comparison overflow-aware in ECDHKeyAgreement.engineGenerateSecret()
Reviewed-by: apetcher
2019-01-18 15:44:17 -08:00
Weijun Wang
a438a0766c 8213010: Supporting keys created with certmgr.exe
Reviewed-by: valeriep
2018-12-13 17:28:30 +08:00
Adam Petcher
3c12c4b0f3 8208698: Improved ECC Implementation
New implementation of ECDH and ECDSA forsome prime-order curves

Reviewed-by: ascarpino
2018-12-11 09:42:45 -05:00
Adam Petcher
12d64aaeba 8213363: X25519 private key PKCS#8 encoding/decoding is incorrect
Fixed private key format to match spec in RFC 8410

Reviewed-by: mullan
2018-11-15 13:22:29 -05:00
Adam Petcher
0aa4581229 8205476: KeyAgreement#generateSecret is not reset for ECDH based algorithm
Clarify spec of generateSecret and modify ECDH in SunEC to conform to spec

Reviewed-by: mullan
2018-10-30 13:48:19 -04:00
Adam Petcher
c3cc65bd08 8201317: X25519/X448 code improvements
Minor code/comment improvements

Reviewed-by: xuelei
2018-08-29 12:00:47 -04:00
Adam Petcher
b2f4d61fb9 8206915: XDH TCK issues
Fixing a couple of conformance issues in XDH

Reviewed-by: mullan
2018-07-13 10:42:30 -04:00
Valerie Peng
9e8d9fe1ee 8146293: Add support for RSASSA-PSS Signature algorithm
Add RSASSA-PSS key and signature support to SunRsaSign provider

Reviewed-by: wetmore
2018-05-21 23:40:52 +00:00
Adam Petcher
f5a247a85f 8171277: Elliptic Curves for Security in Crypto
Implementations of X25519 and X448 key agreement in SunEC

Reviewed-by: mullan
2018-05-08 09:47:28 -04:00
Valerie Peng
b3f1165f7d 8181048: Refactor existing providers to refer to the same constants for default values for key length
Reviewed-by: mullan, ahgross
2017-07-13 20:41:59 +00:00
Erik Joelsson
3789983e89 8187443: Forest Consolidation: Move files to unified layout
Reviewed-by: darcy, ihse
2017-09-12 19:03:39 +02:00