170 Commits

Author SHA1 Message Date
Ben Perez
10dcdf1b47 8347606: Optimize Java implementation of ML-DSA
Reviewed-by: weijun
2025-05-13 22:31:55 +00:00
Weijun Wang
494ef6cb8c 8354305: SHAKE128 and SHAKE256 MessageDigest algorithms
Reviewed-by: valeriep, mullan
2025-05-01 23:34:35 +00:00
Ferenc Rakoczi
465c8e6583 8349721: Add aarch64 intrinsics for ML-KEM
Reviewed-by: adinn
2025-04-16 12:35:24 +00:00
Ferenc Rakoczi
e87ff328d5 8351034: Add AVX-512 intrinsics for ML-DSA
Reviewed-by: sviswanathan, lmesnik, vpaprotski, jbhateja
2025-04-09 21:15:45 +00:00
Anthony Scarpino
e4e62789c7 8346129: Simplify EdDSA & XDH curve name usage
Reviewed-by: weijun, abarashev
2025-03-31 15:59:30 +00:00
Ferenc Rakoczi
3230894bdd 8348561: Add aarch64 intrinsics for ML-DSA
Reviewed-by: adinn
2025-03-04 14:41:35 +00:00
Jamil Nimeh
f8e81d2339 8347506: Compatible OCSP readtimeout property with OCSP timeout
Reviewed-by: mullan, hchao
2025-01-24 23:06:57 +00:00
Weijun Wang
0ee6ba9c4c 8347596: Update HSS/LMS public key encoding
Reviewed-by: mullan
2025-01-14 23:06:45 +00:00
Magnus Ihse Bursie
ddf0461788 8345799: Update copyright year to 2024 for core-libs in files where it was missed
Reviewed-by: joehw, jlu, mli, lancea, kevinw
2024-12-11 21:08:22 +00:00
Weijun Wang
ca46c3a5ba 8343622: AesDkCrypto.stringToKey should not return null
Reviewed-by: valeriep
2024-12-05 08:36:18 +00:00
Weijun Wang
fb95a53944 8345533: Switch ML-DSA implementation to FIPS 204 final
Reviewed-by: bperez, jnimeh
2024-12-05 01:27:10 +00:00
Ben Perez
f904480a49 8345512: Remove wrapper functions for intrinsics in PQC algorithms
Reviewed-by: weijun
2024-12-04 22:01:10 +00:00
Sean Mullan
940aa7c4cf 8344397: Remove Security Manager dependencies from java.security and sun.security packages
Reviewed-by: rriggs, hchao, weijun, alanb
2024-12-02 21:30:53 +00:00
Sean Mullan
c5de307284 8344992: Remove Security Manager dependencies from java.security.cert API and implementations
Reviewed-by: rriggs, hchao
2024-11-26 18:40:52 +00:00
Ben Perez
8b98f958dc 8298387: Implement JEP 497: Quantum-Resistant Module-Lattice-Based Digital Signature Algorithm
Reviewed-by: jnimeh
2024-11-22 17:48:08 +00:00
Ben Perez
13987b4244 8298390: Implement JEP 496: Quantum-Resistant Module-Lattice-Based Key Encapsulation Mechanism
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: valeriep
2024-11-22 16:36:52 +00:00
Sean Mullan
db85090553 8338411: Implement JEP 486: Permanently Disable the Security Manager
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Co-authored-by: Aleksei Efimov <aefimov@openjdk.org>
Co-authored-by: Brian Burkhalter <bpb@openjdk.org>
Co-authored-by: Daniel Fuchs <dfuchs@openjdk.org>
Co-authored-by: Harshitha Onkar <honkar@openjdk.org>
Co-authored-by: Joe Wang <joehw@openjdk.org>
Co-authored-by: Jorn Vernee <jvernee@openjdk.org>
Co-authored-by: Justin Lu <jlu@openjdk.org>
Co-authored-by: Kevin Walls <kevinw@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Naoto Sato <naoto@openjdk.org>
Co-authored-by: Roger Riggs <rriggs@openjdk.org>
Co-authored-by: Brent Christian <bchristi@openjdk.org>
Co-authored-by: Stuart Marks <smarks@openjdk.org>
Co-authored-by: Ian Graves <igraves@openjdk.org>
Co-authored-by: Phil Race <prr@openjdk.org>
Co-authored-by: Erik Gahlin <egahlin@openjdk.org>
Co-authored-by: Jaikiran Pai <jpai@openjdk.org>
Reviewed-by: kevinw, aivanov, rriggs, lancea, coffeys, dfuchs, ihse, erikj, cjplummer, coleenp, naoto, mchung, prr, weijun, joehw, azvegint, psadhukhan, bchristi, sundar, attila
2024-11-12 17:16:15 +00:00
Ferenc Rakoczi
9cfb0f7f7a 8341527: AVX-512 intrinsic for SHA3
Reviewed-by: sviswanathan
2024-10-29 15:18:24 +00:00
Valerie Peng
369c573383 8302111: Serialization considerations
Reviewed-by: skoivu, rhalade, weijun, wetmore
2024-10-15 17:04:27 +05:30
Weijun Wang
3f53d57134 8340327: A common framework to support public key algorithms with standard parameter sets
Reviewed-by: ascarpino, mullan
2024-10-11 21:16:41 +00:00
Ferenc Rakoczi
c54fc08aa3 8338587: Internal XOF Methods for SHAKE128 and SHAKE256
Reviewed-by: valeriep, weijun
2024-09-09 13:49:34 +00:00
Ferenc Rakoczi
75bea280b9 8333867: SHA3 performance can be improved
Reviewed-by: kvn, valeriep
2024-06-21 14:16:23 +00:00
Jonathan Gibbons
9cc163a999 8330178: Clean up non-standard use of /** comments in java.base
Reviewed-by: darcy, iris, dfuchs, aivanov, naoto
2024-04-23 18:43:36 +00:00
Sean Mullan
e702646545 8200566: DistributionPointFetcher fails to fetch CRLs if the DistributionPoints field contains more than one DistributionPoint and the first one fails
Reviewed-by: weijun
2024-04-08 20:08:56 +00:00
Aleksey Shipilev
4a14cba2f1 8329213: Better validation for com.sun.security.ocsp.useget option
Reviewed-by: mullan
2024-04-01 17:27:00 +00:00
Aleksey Shipilev
614db2ea9e 8328638: Fallback option for POST-only OCSP requests
Reviewed-by: mullan, rhalade
2024-03-27 14:44:50 +00:00
Sean Mullan
c4845f01d2 8317431: Implement simpler Comparator when building certification paths
Reviewed-by: kdriver, weijun
2024-03-08 15:20:37 +00:00
Joe Darcy
fbd15b2087 8325189: Enable this-escape javac warning in java.base
Reviewed-by: alanb, erikj, naoto, smarks, ihse, joehw, lancea, weijun
2024-02-07 20:05:11 +00:00
Sean Mullan
a2544568f9 8308204: Enhanced certificate processing
Reviewed-by: mschoene, rhalade, jnimeh
2024-01-16 05:55:55 +00:00
Ben Perez
c328f9589d 8296787: Unify debug printing format of X.509 cert serial numbers
Reviewed-by: mullan, coffeys
2023-12-14 17:57:36 +00:00
Weijun Wang
fcb4df26f1 8320192: SHAKE256 does not work correctly if n >= 137
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: mpowers, valeriep
2023-11-20 23:28:48 +00:00
Sean Mullan
7c80cb26df 8309966: Enhanced TLS connections
Reviewed-by: mschoene, hchao, rhalade, jnimeh
2023-10-17 22:45:06 +00:00
Bradford Wetmore
adca97b659 8286503: Enhance security classes
Reviewed-by: rhalade, mullan, skoivu, weijun
2023-10-17 22:45:06 +00:00
Pavel Rappo
19ae62ae2c 8311170: Simplify and modernize equals and hashCode in security area
Reviewed-by: djelinski, rriggs, valeriep
2023-08-09 12:34:40 +00:00
Pavel Rappo
7b3c2dc5f4 8311122: Fix typos in java.base
Reviewed-by: darcy, naoto, mchung, iris, mli, mullan
2023-07-04 19:03:09 +00:00
Ben Perez
bed9161c81 8308474: DSA does not reset SecureRandom when initSign is called again
Reviewed-by: weijun
2023-06-13 16:34:58 +00:00
Ferenc Rakoczi
050425b141 8298127: HSS/LMS Signature Verification
Reviewed-by: weijun, mullan
2023-06-01 12:31:07 +00:00
Jamil Nimeh
2836c34b64 8179502: Enhance OCSP, CRL and Certificate Fetch Timeouts
Reviewed-by: mullan
2023-05-23 21:32:28 +00:00
Valerie Peng
46e3d24a6f 8155191: Specify that SecureRandom.nextBytes(byte[]) throws NullPointerException when byte array is null
Reviewed-by: mullan
2023-05-12 23:00:00 +00:00
Sean Mullan
f098b490f1 8298310: Enhance TLS session negotiation
Reviewed-by: rhalade, mschoene, weijun, ascarpino
2023-04-18 23:21:21 +00:00
Matthew Donovan
de9f3b6aac 8296400: pointCrlIssuers might be null in DistributionPointFetcher::verifyURL
Reviewed-by: weijun
2023-03-10 14:10:41 +00:00
Jamil Nimeh
1a3cb8c501 8296343: CPVE thrown on missing content-length in OCSP response
Reviewed-by: mullan, rhalade
2023-01-23 18:05:48 +00:00
Jesper Wilhelmsson
fc9f8baf56 Merge 2023-01-18 23:29:12 +00:00
Valerie Peng
0f925fefdf 8295723: security/infra/wycheproof/RunWycheproof.java fails with Assertion Error
Reviewed-by: mschoene, ascarpino, coffeys, rhalade, weijun
2023-01-17 20:58:59 +00:00
Valerie Peng
6c5aefe60c 8293554: Enhanced DH Key Exchanges
Reviewed-by: rhalade, mschoene, ascarpino, weijun
2023-01-17 20:58:59 +00:00
Ryan Wallace
92dfc735f2 8294526: sun/security/provider/SubjectCodeSource.java no longer referenced
Reviewed-by: weijun, xuelei
2023-01-03 13:52:47 +00:00
Weijun Wang
2deb318c9f 8297065: DerOutputStream operations should not throw IOExceptions
Reviewed-by: mullan, valeriep
2022-11-29 12:57:46 +00:00
Xue-Lei Andrew Fan
b366d17a94 8294073: Performance improvement for message digest implementations
Reviewed-by: jjiang
2022-11-21 15:56:19 +00:00
Erik Gahlin
87b809a2cb 8296229: JFR: jfr tool should print unsigned values correctly
Reviewed-by: coffeys, mgronlun
2022-11-11 14:55:41 +00:00
Sean Coffey
102b2b32fe 8292033: Move jdk.X509Certificate event logic to JCA layer
Reviewed-by: mullan
2022-11-09 21:46:56 +00:00