Valerie Peng
640b71da48
8365168: Use 64-bit aligned addresses for CK_ULONG access in PKCS11 native key code
...
Reviewed-by: coffeys
2025-08-20 04:20:22 +00:00
Matthias Baesken
518d5f4bbb
8361871: [GCC static analyzer] complains about use of uninitialized value ckpObject in p11_util.c
...
Reviewed-by: lucy
2025-07-25 08:26:57 +00:00
Matthias Baesken
1cde536b98
8361868: [GCC static analyzer] complains about missing calloc - NULL checks in p11_util.c
...
Reviewed-by: lucy, stuefe
2025-07-17 11:24:40 +00:00
Bradford Wetmore
2926435d22
8341346: Add support for exporting TLS Keying Material
...
Reviewed-by: hchao, jnimeh, weijun
2025-05-30 23:06:36 +00:00
Per Minborg
d4b923d175
8357268: Use JavaNioAccess.getBufferAddress rather than DirectBuffer.address()
...
Reviewed-by: alanb, valeriep
2025-05-27 19:11:12 +00:00
Weijun Wang
079fccfa9a
8353888: Implement JEP 510: Key Derivation Function API
...
Reviewed-by: valeriep, mullan, liach
2025-05-16 12:25:04 +00:00
Valerie Peng
4fc10a1e7e
8356087: Problematic KeyInfo check using key algorithm in P11SecretKeyFactory class
...
Reviewed-by: weijun
2025-05-13 03:46:30 +00:00
Valerie Peng
6536430a3b
8348732: SunJCE and SunPKCS11 have different PBE key encodings
...
Reviewed-by: weijun, fferrari
2025-05-01 23:08:16 +00:00
Martin Balao
5264d80bea
8350661: PKCS11 HKDF throws ProviderException when requesting a 31-byte AES key
...
Reviewed-by: fferrari, valeriep, djelinski
2025-04-22 14:37:10 +00:00
Daniel Jeliński
84f71dd624
8349849: PKCS11 SunTlsKeyMaterial crashes when used with TLS1.2 TlsKeyMaterialParameterSpec
...
Reviewed-by: wetmore, valeriep
2025-03-10 07:52:11 +00:00
Martin Balao
6ddbcc34c0
8328119: Support HKDF in SunPKCS11 (Preview)
...
8346720: Support Generic keys in SunPKCS11 SecretKeyFactory
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@openjdk.org>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: valeriep, kdriver, weijun
2025-02-13 16:55:33 +00:00
Weijun Wang
aba60a9274
8189441: Define algorithm names for keys derived from KeyAgreement
...
Reviewed-by: mullan
2025-01-27 18:09:17 +00:00
SendaoYan
6c59185475
8345757: [ASAN] clang17 report 'dprintf' macro redefined
...
Reviewed-by: kbarrett, valeriep
2024-12-25 01:27:35 +00:00
Archie Cobbs
4b21fb9df9
8343467: Remove unnecessary @SuppressWarnings annotations (security)
...
Reviewed-by: mullan
2024-12-13 22:40:42 +00:00
Magnus Ihse Bursie
fe0173ddef
8345803: Update copyright year to 2024 for security in files where it was missed
...
Reviewed-by: mullan
2024-12-09 21:03:37 +00:00
Sean Mullan
4d1a51cb85
8344120: Remove Security Manager dependencies from jdk.crypto.cryptoki module
...
Reviewed-by: rriggs, ascarpino
2024-11-14 14:15:16 +00:00
Valerie Peng
b4ab290fd7
8331959: Update PKCS#11 Cryptographic Token Interface to v3.1
...
Reviewed-by: weijun, ascarpino
2024-10-16 21:26:57 +00:00
Weijun Wang
893e7bc894
8328726: Better Kerberos support
...
Reviewed-by: ahgross, rhalade, valeriep, coffeys
2024-10-15 17:04:27 +05:30
Valerie Peng
369c573383
8302111: Serialization considerations
...
Reviewed-by: skoivu, rhalade, weijun, wetmore
2024-10-15 17:04:27 +05:30
Valerie Peng
fdfe503d01
8335288: SunPKCS11 initialization will call C_GetMechanismInfo on unsupported mechanisms
...
Reviewed-by: mbalao, weijun, hchao
2024-09-13 21:13:54 +00:00
Julian Waters
cd9e241f0e
8336289: Obliterate most references to _snprintf in the Windows JDK
...
Reviewed-by: kbarrett, dholmes, jpai, mullan, djelinski, prr
2024-08-27 04:13:54 +00:00
Maurizio Cimadamore
20d8f58c92
8331671: Implement JEP 472: Prepare to Restrict the Use of JNI
...
Reviewed-by: jpai, prr, ihse, kcr, alanb
2024-08-26 09:17:45 +00:00
Martin Balao
3251eea1f4
8336499: Failure when creating non-CRT RSA private keys in SunPKCS11
...
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@openjdk.org>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: fferrari, valeriep
2024-07-24 02:39:35 +00:00
Francisco Ferrari Bihurriet
4ab7e98c79
8330842: Support AES CBC with Ciphertext Stealing (CTS) in SunPKCS11
...
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@openjdk.org>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: valeriep
2024-06-27 15:07:00 +00:00
Prajwal Kumaraswamy
7c2c24fc05
8261433: Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit
...
Reviewed-by: djelinski, valeriep, coffeys
2024-05-13 16:10:45 +00:00
Valerie Peng
1b476f52ba
8293345: SunPKCS11 provider checks on PKCS11 Mechanism are problematic
...
Reviewed-by: djelinski, weijun
2024-05-10 16:53:27 +00:00
Valerie Peng
d1c6cd104e
8330133: libj2pkcs11.so crashes on some pkcs#11 v3.0 libraries
...
Reviewed-by: djelinski, weijun
2024-04-16 22:47:02 +00:00
Valerie Peng
6276789fb5
8328785: IOException: Symbol not found: C_GetInterface for PKCS11 interface prior to V3.0
...
Reviewed-by: djelinski, weijun
2024-04-09 21:51:51 +00:00
Martin Balao
13cf0707f9
8328556: Do not extract large CKO_SECRET_KEY keys from the NSS Software Token
...
Reviewed-by: djelinski
2024-03-22 15:28:05 +00:00
Daniel Jeliński
8f9899b23e
8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode
...
Reviewed-by: valeriep
2024-03-13 19:09:52 +00:00
Daniel Jeliński
ec9437dbcc
8325247: Memory leak in SessionKeyRef class def when using PKCS11 security provider
...
Reviewed-by: valeriep
2024-02-27 07:06:35 +00:00
Magnus Ihse Bursie
18e24d0619
8325109: Sort method modifiers in canonical order
...
Reviewed-by: aivanov, rriggs, darcy, prappo
2024-02-07 15:50:40 +00:00
Martin Balao
0f5f3c9b97
8325254: CKA_TOKEN private and secret keys are not necessarily sensitive
...
Reviewed-by: valeriep
2024-02-06 19:49:30 +00:00
Daniel Jeliński
68206b533b
8324585: JVM native memory leak in PCKS11-NSS security provider
...
Reviewed-by: valeriep
2024-02-01 08:37:24 +00:00
Weijun Wang
9123961aaa
8318096: Introduce AsymmetricKey interface with a getParams method
...
Reviewed-by: darcy, mullan, ascarpino
2023-10-26 22:43:06 +00:00
Bradford Wetmore
adca97b659
8286503: Enhance security classes
...
Reviewed-by: rhalade, mullan, skoivu, weijun
2023-10-17 22:45:06 +00:00
Valerie Peng
ba6cdbe2c2
8309214: sun/security/pkcs11/KeyStore/CertChainRemoval.java fails after 8301154
...
Reviewed-by: mbaesken, jnimeh
2023-08-22 23:49:03 +00:00
Pavel Rappo
19ae62ae2c
8311170: Simplify and modernize equals and hashCode in security area
...
Reviewed-by: djelinski, rriggs, valeriep
2023-08-09 12:34:40 +00:00
Valerie Peng
c27c87786a
8302017: Allocate BadPaddingException only if it will be thrown
...
Reviewed-by: xuelei
2023-07-27 21:24:03 +00:00
Daniel Jeliński
354c6605e3
8307185: pkcs11 native libraries make JNI calls into java code while holding GC lock
...
Reviewed-by: alanb, valeriep
2023-07-20 16:39:17 +00:00
Anthony Scarpino
e737968792
8308398: Move SunEC crypto provider into java.base
...
Reviewed-by: valeriep, alanb
2023-07-17 17:38:54 +00:00
Martin Balao
760cb04a2e
8309569: sun/security/pkcs11/Signature/TestRSAKeyLength.java fails after JDK-8301553
...
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@redhat.com>
Reviewed-by: valeriep
2023-06-08 01:24:26 +00:00
Martin Balao
4a75fd462c
8301553: Support Password-Based Cryptography in SunPKCS11
...
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@redhat.com>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: valeriep
2023-06-06 19:39:34 +00:00
Valerie Peng
6b27dad76e
8301154: SunPKCS11 KeyStore deleteEntry results in dangling PrivateKey entries
...
Reviewed-by: weijun, hchao
2023-05-23 21:11:38 +00:00
Valerie Peng
46e3d24a6f
8155191: Specify that SecureRandom.nextBytes(byte[]) throws NullPointerException when byte array is null
...
Reviewed-by: mullan
2023-05-12 23:00:00 +00:00
Jiangli Zhou
fed262a9cf
8306949: Resolve miscellaneous multiple symbol definition issues when statically linking JDK/VM natives with standard launcher
...
Reviewed-by: alanb
2023-04-27 15:57:51 +00:00
Jiangli Zhou
9bc6a212f7
8306033: Resolve multiple definition of 'throwIOException' and friends when statically linking with JDK native libraries
...
Reviewed-by: alanb
2023-04-26 16:04:48 +00:00
Valerie Peng
e575924131
8305336: java.security.debug=sunpkcs11 breaks PKCS#11 configuration with slotListIndex
...
Reviewed-by: mpowers, weijun
2023-04-17 04:47:40 +00:00
Jiangli Zhou
ce4b995556
8305761: Resolve multiple definition of 'jvm' when statically linking with JDK native libraries
...
Reviewed-by: alanb, kevinw
2023-04-11 15:05:44 +00:00
Valerie Peng
394eac850c
8295425: Match the default priv exp length between SunPKCS11 and other JDK providers
...
Reviewed-by: weijun
2023-03-01 22:40:50 +00:00