Re: RFR: 8264849: Add KW and KWP support to PKCS11 provider

2021-09-28 Thread Valerie Peng
On Fri, 17 Sep 2021 23:22:21 GMT, Valerie Peng wrote: > Anyone has time to review this RFE for adding AES cipher with KW, KWP modes > support to SunPKCS11 provider? > > The main changes are in only one new class, i.e. P11KeyWrapCipher.java, which > is the CipherSpi impl for the native PKCS11 k

Re: RFR: 8274050: Unnecessary Vector usage in javax.crypto [v2]

2021-09-28 Thread Valerie Peng
On Tue, 28 Sep 2021 21:01:20 GMT, Andrey Turbanov wrote: >> In [JDK-8268873](https://bugs.openjdk.java.net/browse/JDK-8268873) I missed >> a few places, where Vector could be replaced with ArrayList. >> Usage of thread-safe collection `Vector` is unnecessary. It's recommended to >> use `ArrayL

Re: RFR: 8274050: Unnecessary Vector usage in javax.crypto [v2]

2021-09-28 Thread Andrey Turbanov
> In [JDK-8268873](https://bugs.openjdk.java.net/browse/JDK-8268873) I missed a > few places, where Vector could be replaced with ArrayList. > Usage of thread-safe collection `Vector` is unnecessary. It's recommended to > use `ArrayList` if a thread-safe implementation is not needed. Andrey Turb

Re: RFR: 8274050: Unnecessary Vector usage in javax.crypto

2021-09-28 Thread Valerie Peng
On Thu, 26 Aug 2021 06:19:49 GMT, Andrey Turbanov wrote: > In [JDK-8268873](https://bugs.openjdk.java.net/browse/JDK-8268873) I missed a > few places, where Vector could be replaced with ArrayList. > Usage of thread-safe collection `Vector` is unnecessary. It's recommended to > use `ArrayList`

Re: RFR: 8270380: Change the default value of the java.security.manager system property to disallow

2021-09-28 Thread Weijun Wang
On Tue, 31 Aug 2021 02:05:06 GMT, Weijun Wang wrote: >> This change modifies the default value of the `java.security.manager` system >> property from "allow" to "disallow". This means unless it's explicitly set >> to "allow", any call to `System.setSecurityManager()` would throw an UOE. >> >>

Re: Understanding elliptic curve spec limitations

2021-09-28 Thread Bernd Eckenfels
This should also answer your other Question, if you Register a Provider (like bouncycastle) it should actually provide such curves via the JCE interface. I am not Aware of Bugs in this area (but on the other Hand besides some stupid EA-agency requirements for brainpool curves nobody in their Right

Re: [External] : Re: Understanding elliptic curve spec limitations

2021-09-28 Thread Anthony Scarpino
When I read your first message I thought you were unable to use them using OpenSSL. Yes, the curves you are most likely looking for have been removed as the CSR describes. Tony > On Sep 28, 2021, at 8:32 AM, David Blevins wrote: > >  >> >>> On Sep 28, 2021, at 12:49 AM, David Blevins wr

Re: Understanding elliptic curve spec limitations

2021-09-28 Thread David Blevins
> On Sep 28, 2021, at 12:49 AM, David Blevins wrote: > >> On Sep 27, 2021, at 3:32 PM, Anthony Scarpino >> wrote: >> >> On 9/27/21 2:22 PM, David Blevins wrote: >>> I've been putting a significant amount of work into compiling a large set >>> of elliptic curve parameters/names/oids for an ope

Verification of OCSP Responses signed with RSASSA-PSS fails with Java 11 LTS

2021-09-28 Thread can comert
Hello everyone, I am trying to verify Certificate Revocation Status by using JDK and the preferred way is the OCSP request. I came across certificates provided by a certain Certificate Authority (Procilion) which I can not verify the Revocation Status by using the JDK (I tried with the latest 11 L

Re: RFR: 8273670: Remove weak etypes from default krb5 etype list [v3]

2021-09-28 Thread Sean Mullan
On Mon, 27 Sep 2021 01:28:29 GMT, Weijun Wang wrote: >> This code change removes weak etypes from the default list so it's safer to >> enable one of them. See the corresponding CSR at >> https://bugs.openjdk.java.net/browse/JDK-8274207 for more explanation. BTW, >> please review the CSR as wel

Re: RFR: 8273670: Remove weak etypes from default krb5 etype list [v4]

2021-09-28 Thread Weijun Wang
> This code change removes weak etypes from the default list so it's safer to > enable one of them. See the corresponding CSR at > https://bugs.openjdk.java.net/browse/JDK-8274207 for more explanation. BTW, > please review the CSR as well. Weijun Wang has updated the pull request incrementally

Re: RFR: 8273670: Remove weak etypes from default krb5 etype list [v3]

2021-09-28 Thread Weijun Wang
On Tue, 28 Sep 2021 14:08:44 GMT, Sean Mullan wrote: >> Weijun Wang has updated the pull request incrementally with one additional >> commit since the last revision: >> >> disable weak checksums as well > > src/java.security.jgss/share/classes/sun/security/krb5/internal/crypto/EType.java > l

Re: RFR: 8273670: Remove weak etypes from default krb5 etype list [v3]

2021-09-28 Thread Sean Mullan
On Mon, 27 Sep 2021 01:28:29 GMT, Weijun Wang wrote: >> This code change removes weak etypes from the default list so it's safer to >> enable one of them. See the corresponding CSR at >> https://bugs.openjdk.java.net/browse/JDK-8274207 for more explanation. BTW, >> please review the CSR as wel

Re: Understanding elliptic curve spec limitations

2021-09-28 Thread David Blevins
> On Sep 27, 2021, at 3:32 PM, Anthony Scarpino > wrote: > > On 9/27/21 2:22 PM, David Blevins wrote: >> I've been putting a significant amount of work into compiling a large set of >> elliptic curve parameters/names/oids for an open source library and a >> related closed source security produ