Re: RFR: 8248268: Support KWP in addition to KW [v10]

2021-06-02 Thread Valerie Peng
On Wed, 2 Jun 2021 17:52:07 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v10]

2021-06-02 Thread Valerie Peng
> This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed > to

Re: RFR: 8248268: Support KWP in addition to KW [v9]

2021-06-01 Thread Xue-Lei Andrew Fan
On Sun, 30 May 2021 07:25:54 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v9]

2021-06-01 Thread Valerie Peng
On Sun, 30 May 2021 07:25:54 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v9]

2021-05-30 Thread Valerie Peng
> This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed > to

Re: RFR: 8248268: Support KWP in addition to KW [v8]

2021-05-28 Thread Valerie Peng
On Tue, 25 May 2021 20:33:55 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v8]

2021-05-25 Thread Valerie Peng
> This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed > to

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-25 Thread Valerie Peng
On Fri, 14 May 2021 00:33:12 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-24 Thread Valerie Peng
On Sat, 22 May 2021 01:02:50 GMT, Xue-Lei Andrew Fan wrote: >> Valerie Peng has updated the pull request with a new target base due to a >> merge or a rebase. The pull request now contains seven commits: >> >> - Merge master into JDK-8248268 >> - Minor update to address review comments. >>

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-24 Thread Michael StJohns
Some more general comments - related to the restructuring. In AESKeyWrap at 152-155 - that check probably should be moved to W().   KWP should do the formatting prior to passing the data to W().  Also at 185-187 - move that to W_INV(). AESKeyWrap at 158 - shouldn't you be returning the

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-24 Thread Valerie Peng
On Sat, 22 May 2021 00:45:27 GMT, Xue-Lei Andrew Fan wrote: >> Valerie Peng has updated the pull request with a new target base due to a >> merge or a rebase. The pull request now contains seven commits: >> >> - Merge master into JDK-8248268 >> - Minor update to address review comments. >>

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-24 Thread Valerie Peng
On Fri, 21 May 2021 20:44:57 GMT, Xue-Lei Andrew Fan wrote: >> Valerie Peng has updated the pull request with a new target base due to a >> merge or a rebase. The pull request now contains seven commits: >> >> - Merge master into JDK-8248268 >> - Minor update to address review comments. >>

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-24 Thread Valerie Peng
On Fri, 21 May 2021 19:15:49 GMT, Xue-Lei Andrew Fan wrote: >> Valerie Peng has updated the pull request with a new target base due to a >> merge or a rebase. The pull request now contains seven commits: >> >> - Merge master into JDK-8248268 >> - Minor update to address review comments. >>

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-22 Thread Michael StJohns
On 5/22/2021 1:57 PM, Xue-Lei Andrew Fan wrote: On Fri, 14 May 2021 00:33:12 GMT, Valerie Peng wrote: This change updates SunJCE provider as below: - updated existing AESWrap support with AES/KW/NoPadding cipher transformation. - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding.

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-22 Thread Xue-Lei Andrew Fan
On Fri, 14 May 2021 00:33:12 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-22 Thread Michael StJohns
In line On 5/21/2021 5:01 PM, Xue-Lei Andrew Fan wrote: On Fri, 14 May 2021 00:33:12 GMT, Valerie Peng wrote: This change updates SunJCE provider as below: - updated existing AESWrap support with AES/KW/NoPadding cipher transformation. - added support for AES/KWP/NoPadding and

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-21 Thread Xue-Lei Andrew Fan
On Fri, 14 May 2021 00:33:12 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-21 Thread Xue-Lei Andrew Fan
On Fri, 14 May 2021 00:33:12 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v7]

2021-05-13 Thread Valerie Peng
> This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed > to

Re: RFR: 8248268: Support KWP in addition to KW [v6]

2021-05-13 Thread Valerie Peng
> This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed > to

Re: RFR: 8248268: Support KWP in addition to KW [v4]

2021-04-13 Thread Valerie Peng
On Sat, 27 Mar 2021 03:51:40 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Refactor code to reduce code duplication >> Address review comments >> Add more test vectors > >

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-04-12 Thread Valerie Peng
On Tue, 23 Mar 2021 19:14:16 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW [v4]

2021-04-12 Thread Valerie Peng
On Sat, 27 Mar 2021 03:54:24 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Refactor code to reduce code duplication >> Address review comments >> Add more test vectors > >

Re: RFR: 8248268: Support KWP in addition to KW [v5]

2021-04-12 Thread Valerie Peng
> This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed > to

Re: RFR: 8248268: Support KWP in addition to KW [v4]

2021-04-07 Thread Greg Rubin
I agree that the response from Housley certainly supports that "AutoPadding" is likely a safe mode to use. I still would prefer not to see it (keeping things simple) but don't really have any objections to it. For KW+PKCS5, I have (unfortunately) seen this deployed in the real world and had to

Re: RFR: 8248268: Support KWP in addition to KW [v4]

2021-04-07 Thread Michael StJohns
*sigh* Minor correction in line. On 4/7/2021 2:49 PM, Michael StJohns wrote: On 4/7/2021 1:28 PM, Greg Rubin wrote: Mike, Yes, this was in response to your comment. I'm aware that the IV really serves more as an integrity check and mode signalling mechanism than anything else. My concern is

Re: RFR: 8248268: Support KWP in addition to KW [v4]

2021-04-07 Thread Michael StJohns
On 4/7/2021 1:28 PM, Greg Rubin wrote: Mike, Yes, this was in response to your comment. I'm aware that the IV really serves more as an integrity check and mode signalling mechanism than anything else. My concern is that in the past few years I've seen various issues related to "in band

Re: RFR: 8248268: Support KWP in addition to KW [v4]

2021-04-07 Thread Greg Rubin
Mike, Yes, this was in response to your comment. I'm aware that the IV really serves more as an integrity check and mode signalling mechanism than anything else. My concern is that in the past few years I've seen various issues related to "in band signalling" where something about the ciphertext

Re: RFR: 8248268: Support KWP in addition to KW [v4]

2021-04-03 Thread Michael StJohns
On 4/3/2021 11:35 AM, Greg Rubin wrote: I'd advise against the AutoPadding scheme without more careful analysis and discussion. Have we seen either KW or KWP specifications which recommend that behavior? My concern is that we've seen cases before where two different cryptographic algorithms

Re: RFR: 8248268: Support KWP in addition to KW [v4]

2021-04-03 Thread Greg Rubin
On Sat, 27 Mar 2021 00:25:09 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v4]

2021-03-26 Thread Valerie Peng
> This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed > to

Re: RFR: 8248268: Support KWP in addition to KW

2021-03-26 Thread Valerie Peng
On Thu, 25 Mar 2021 02:18:06 GMT, Valerie Peng wrote: >> Ping, anyone has time to review this? > >> >> >> _Mailing list message from [Michael StJohns](mailto:mstjo...@comcast.net) on >> [security-dev](mailto:security-dev@openjdk.java.net):_ >> >> On 3/23/2021 4:15 PM, Greg Rubin wrote: >>

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-26 Thread Valerie Peng
On Tue, 23 Mar 2021 17:16:04 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-26 Thread Valerie Peng
On Tue, 23 Mar 2021 19:06:30 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-25 Thread Valerie Peng
On Tue, 23 Mar 2021 18:47:32 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-25 Thread Valerie Peng
On Tue, 23 Mar 2021 20:09:23 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-25 Thread Valerie Peng
On Tue, 23 Mar 2021 19:57:44 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-24 Thread Valerie Peng
On Tue, 23 Mar 2021 19:18:14 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW

2021-03-24 Thread Valerie Peng
On Mon, 22 Mar 2021 18:48:47 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-24 Thread Valerie Peng
On Tue, 23 Mar 2021 19:56:40 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-24 Thread Valerie Peng
On Tue, 23 Mar 2021 18:41:26 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-24 Thread Valerie Peng
On Tue, 23 Mar 2021 18:39:27 GMT, Greg Rubin wrote: >> Valerie Peng has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Changed AlgorithmParameters impls to register under AES/KW/NoPadding and >> AES/KWP/NoPadding > >

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-23 Thread Michael StJohns
On 3/22/2021 5:43 PM, Valerie Peng wrote: This change updates SunJCE provider as below: - updated existing AESWrap support with AES/KW/NoPadding cipher transformation. - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-23 Thread Michael StJohns
On 3/23/2021 4:15 PM, Greg Rubin wrote: 177: System.out.println("Testing " + ALGO); 178: c = Cipher.getInstance(ALGO, "SunJCE"); 179: for (int i = 0; i < MAX_KWP_PAD_LEN; i++) { I see that here (and earlier) we do test all padding lengths. I'd still like some KATs

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-23 Thread Greg Rubin
On Mon, 22 Mar 2021 21:43:31 GMT, Valerie Peng wrote: >> This change updates SunJCE provider as below: >> - updated existing AESWrap support with AES/KW/NoPadding cipher >> transformation. >> - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. >> >> Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v3]

2021-03-22 Thread Valerie Peng
> This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed > to

Re: RFR: 8248268: Support KWP in addition to KW

2021-03-22 Thread Valerie Peng
On Thu, 4 Feb 2021 10:51:12 GMT, Valerie Peng wrote: > This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e.

Re: RFR: 8248268: Support KWP in addition to KW [v2]

2021-02-04 Thread Valerie Peng
> This change updates SunJCE provider as below: > - updated existing AESWrap support with AES/KW/NoPadding cipher > transformation. > - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. > > Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed > to

RFR: 8248268: Support KWP in addition to KW

2021-02-04 Thread Valerie Peng
This change updates SunJCE provider as below: - updated existing AESWrap support with AES/KW/NoPadding cipher transformation. - added support for AES/KWP/NoPadding and AES/KW/PKCS5Padding. Existing AESWrap impl, i.e. AESWrapCipher class, is re-factored and renamed to KeyWrapCipher class. The W