152 Commits

Author SHA1 Message Date
Valerie Peng
640b71da48 8365168: Use 64-bit aligned addresses for CK_ULONG access in PKCS11 native key code
Reviewed-by: coffeys
2025-08-20 04:20:22 +00:00
Matthias Baesken
518d5f4bbb 8361871: [GCC static analyzer] complains about use of uninitialized value ckpObject in p11_util.c
Reviewed-by: lucy
2025-07-25 08:26:57 +00:00
Matthias Baesken
1cde536b98 8361868: [GCC static analyzer] complains about missing calloc - NULL checks in p11_util.c
Reviewed-by: lucy, stuefe
2025-07-17 11:24:40 +00:00
Bradford Wetmore
2926435d22 8341346: Add support for exporting TLS Keying Material
Reviewed-by: hchao, jnimeh, weijun
2025-05-30 23:06:36 +00:00
Per Minborg
d4b923d175 8357268: Use JavaNioAccess.getBufferAddress rather than DirectBuffer.address()
Reviewed-by: alanb, valeriep
2025-05-27 19:11:12 +00:00
Weijun Wang
079fccfa9a 8353888: Implement JEP 510: Key Derivation Function API
Reviewed-by: valeriep, mullan, liach
2025-05-16 12:25:04 +00:00
Valerie Peng
4fc10a1e7e 8356087: Problematic KeyInfo check using key algorithm in P11SecretKeyFactory class
Reviewed-by: weijun
2025-05-13 03:46:30 +00:00
Valerie Peng
6536430a3b 8348732: SunJCE and SunPKCS11 have different PBE key encodings
Reviewed-by: weijun, fferrari
2025-05-01 23:08:16 +00:00
Martin Balao
5264d80bea 8350661: PKCS11 HKDF throws ProviderException when requesting a 31-byte AES key
Reviewed-by: fferrari, valeriep, djelinski
2025-04-22 14:37:10 +00:00
Daniel Jeliński
84f71dd624 8349849: PKCS11 SunTlsKeyMaterial crashes when used with TLS1.2 TlsKeyMaterialParameterSpec
Reviewed-by: wetmore, valeriep
2025-03-10 07:52:11 +00:00
Martin Balao
6ddbcc34c0 8328119: Support HKDF in SunPKCS11 (Preview)
8346720: Support Generic keys in SunPKCS11 SecretKeyFactory

Co-authored-by: Francisco Ferrari Bihurriet <fferrari@openjdk.org>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: valeriep, kdriver, weijun
2025-02-13 16:55:33 +00:00
Weijun Wang
aba60a9274 8189441: Define algorithm names for keys derived from KeyAgreement
Reviewed-by: mullan
2025-01-27 18:09:17 +00:00
SendaoYan
6c59185475 8345757: [ASAN] clang17 report 'dprintf' macro redefined
Reviewed-by: kbarrett, valeriep
2024-12-25 01:27:35 +00:00
Archie Cobbs
4b21fb9df9 8343467: Remove unnecessary @SuppressWarnings annotations (security)
Reviewed-by: mullan
2024-12-13 22:40:42 +00:00
Magnus Ihse Bursie
fe0173ddef 8345803: Update copyright year to 2024 for security in files where it was missed
Reviewed-by: mullan
2024-12-09 21:03:37 +00:00
Sean Mullan
4d1a51cb85 8344120: Remove Security Manager dependencies from jdk.crypto.cryptoki module
Reviewed-by: rriggs, ascarpino
2024-11-14 14:15:16 +00:00
Valerie Peng
b4ab290fd7 8331959: Update PKCS#11 Cryptographic Token Interface to v3.1
Reviewed-by: weijun, ascarpino
2024-10-16 21:26:57 +00:00
Weijun Wang
893e7bc894 8328726: Better Kerberos support
Reviewed-by: ahgross, rhalade, valeriep, coffeys
2024-10-15 17:04:27 +05:30
Valerie Peng
369c573383 8302111: Serialization considerations
Reviewed-by: skoivu, rhalade, weijun, wetmore
2024-10-15 17:04:27 +05:30
Valerie Peng
fdfe503d01 8335288: SunPKCS11 initialization will call C_GetMechanismInfo on unsupported mechanisms
Reviewed-by: mbalao, weijun, hchao
2024-09-13 21:13:54 +00:00
Julian Waters
cd9e241f0e 8336289: Obliterate most references to _snprintf in the Windows JDK
Reviewed-by: kbarrett, dholmes, jpai, mullan, djelinski, prr
2024-08-27 04:13:54 +00:00
Maurizio Cimadamore
20d8f58c92 8331671: Implement JEP 472: Prepare to Restrict the Use of JNI
Reviewed-by: jpai, prr, ihse, kcr, alanb
2024-08-26 09:17:45 +00:00
Martin Balao
3251eea1f4 8336499: Failure when creating non-CRT RSA private keys in SunPKCS11
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@openjdk.org>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: fferrari, valeriep
2024-07-24 02:39:35 +00:00
Francisco Ferrari Bihurriet
4ab7e98c79 8330842: Support AES CBC with Ciphertext Stealing (CTS) in SunPKCS11
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@openjdk.org>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: valeriep
2024-06-27 15:07:00 +00:00
Prajwal Kumaraswamy
7c2c24fc05 8261433: Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit
Reviewed-by: djelinski, valeriep, coffeys
2024-05-13 16:10:45 +00:00
Valerie Peng
1b476f52ba 8293345: SunPKCS11 provider checks on PKCS11 Mechanism are problematic
Reviewed-by: djelinski, weijun
2024-05-10 16:53:27 +00:00
Valerie Peng
d1c6cd104e 8330133: libj2pkcs11.so crashes on some pkcs#11 v3.0 libraries
Reviewed-by: djelinski, weijun
2024-04-16 22:47:02 +00:00
Valerie Peng
6276789fb5 8328785: IOException: Symbol not found: C_GetInterface for PKCS11 interface prior to V3.0
Reviewed-by: djelinski, weijun
2024-04-09 21:51:51 +00:00
Martin Balao
13cf0707f9 8328556: Do not extract large CKO_SECRET_KEY keys from the NSS Software Token
Reviewed-by: djelinski
2024-03-22 15:28:05 +00:00
Daniel Jeliński
8f9899b23e 8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode
Reviewed-by: valeriep
2024-03-13 19:09:52 +00:00
Daniel Jeliński
ec9437dbcc 8325247: Memory leak in SessionKeyRef class def when using PKCS11 security provider
Reviewed-by: valeriep
2024-02-27 07:06:35 +00:00
Magnus Ihse Bursie
18e24d0619 8325109: Sort method modifiers in canonical order
Reviewed-by: aivanov, rriggs, darcy, prappo
2024-02-07 15:50:40 +00:00
Martin Balao
0f5f3c9b97 8325254: CKA_TOKEN private and secret keys are not necessarily sensitive
Reviewed-by: valeriep
2024-02-06 19:49:30 +00:00
Daniel Jeliński
68206b533b 8324585: JVM native memory leak in PCKS11-NSS security provider
Reviewed-by: valeriep
2024-02-01 08:37:24 +00:00
Weijun Wang
9123961aaa 8318096: Introduce AsymmetricKey interface with a getParams method
Reviewed-by: darcy, mullan, ascarpino
2023-10-26 22:43:06 +00:00
Bradford Wetmore
adca97b659 8286503: Enhance security classes
Reviewed-by: rhalade, mullan, skoivu, weijun
2023-10-17 22:45:06 +00:00
Valerie Peng
ba6cdbe2c2 8309214: sun/security/pkcs11/KeyStore/CertChainRemoval.java fails after 8301154
Reviewed-by: mbaesken, jnimeh
2023-08-22 23:49:03 +00:00
Pavel Rappo
19ae62ae2c 8311170: Simplify and modernize equals and hashCode in security area
Reviewed-by: djelinski, rriggs, valeriep
2023-08-09 12:34:40 +00:00
Valerie Peng
c27c87786a 8302017: Allocate BadPaddingException only if it will be thrown
Reviewed-by: xuelei
2023-07-27 21:24:03 +00:00
Daniel Jeliński
354c6605e3 8307185: pkcs11 native libraries make JNI calls into java code while holding GC lock
Reviewed-by: alanb, valeriep
2023-07-20 16:39:17 +00:00
Anthony Scarpino
e737968792 8308398: Move SunEC crypto provider into java.base
Reviewed-by: valeriep, alanb
2023-07-17 17:38:54 +00:00
Martin Balao
760cb04a2e 8309569: sun/security/pkcs11/Signature/TestRSAKeyLength.java fails after JDK-8301553
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@redhat.com>
Reviewed-by: valeriep
2023-06-08 01:24:26 +00:00
Martin Balao
4a75fd462c 8301553: Support Password-Based Cryptography in SunPKCS11
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@redhat.com>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: valeriep
2023-06-06 19:39:34 +00:00
Valerie Peng
6b27dad76e 8301154: SunPKCS11 KeyStore deleteEntry results in dangling PrivateKey entries
Reviewed-by: weijun, hchao
2023-05-23 21:11:38 +00:00
Valerie Peng
46e3d24a6f 8155191: Specify that SecureRandom.nextBytes(byte[]) throws NullPointerException when byte array is null
Reviewed-by: mullan
2023-05-12 23:00:00 +00:00
Jiangli Zhou
fed262a9cf 8306949: Resolve miscellaneous multiple symbol definition issues when statically linking JDK/VM natives with standard launcher
Reviewed-by: alanb
2023-04-27 15:57:51 +00:00
Jiangli Zhou
9bc6a212f7 8306033: Resolve multiple definition of 'throwIOException' and friends when statically linking with JDK native libraries
Reviewed-by: alanb
2023-04-26 16:04:48 +00:00
Valerie Peng
e575924131 8305336: java.security.debug=sunpkcs11 breaks PKCS#11 configuration with slotListIndex
Reviewed-by: mpowers, weijun
2023-04-17 04:47:40 +00:00
Jiangli Zhou
ce4b995556 8305761: Resolve multiple definition of 'jvm' when statically linking with JDK native libraries
Reviewed-by: alanb, kevinw
2023-04-11 15:05:44 +00:00
Valerie Peng
394eac850c 8295425: Match the default priv exp length between SunPKCS11 and other JDK providers
Reviewed-by: weijun
2023-03-01 22:40:50 +00:00