Re: Linux support for java.security.jgss "nativeccache" functionality

2025-02-03 Thread Hall, Nick
Hi Sean, Thanks for your response - I confirm that my company is D. E. Shaw & Co. Let me know if I can provide any further information! Nick From: Sean Mullan Sent: Monday, February 3, 2025 11:03 pm To: Hall, Nick ; security-dev@openjdk.org Subject: Re: Linux

Re: RFR: 8349106: Change ChaCha20 intrinsic to use quarter-round parallel implementation on aarch64 [v2]

2025-02-03 Thread Jamil Nimeh
> This enhancement makes a change to the ChaCha20 block function intrinsic on > aarch64, moving away from the block parallel implementation and to the > quarter-round parallel implementation that was done on x86_64. Assembly > language profiling yielded an 11% improvement in throughput. When p

Re: Linux support for java.security.jgss "nativeccache" functionality

2025-02-03 Thread Sean Mullan
Hi Nick, This proposal does sound like it would be useful, so I think we can start some more discussions about it. Once we go a bit further in the discussions and we decide it is worthwhile, we can open a JBS issue for tracking purposes. For starters, can you confirm that your company is "D.

Integrated: 8347428: Avoid using secret-key in specifications

2025-02-03 Thread Ben Perez
On Tue, 28 Jan 2025 20:08:31 GMT, Ben Perez wrote: > There are quite some places in API specifications that use the term > "secret-key". This is not a formal term. Consider replacing them with "secret > key". This pull request has now been integrated. Changeset: 43979fb1 Author:Ben Perez

RFR: 8348309: MultiNST tests need more debugging and timing

2025-02-03 Thread Anthony Scarpino
I need a review of this change that adds new timing controls for the initial server setup. On rare occasions, more so on certain architectures, the server may not fully start before the client tries to connect. Additional debugging is added to help identify if there are other timing issues. T

Re: RFR: 8347428: Avoid using secret-key in specifications [v2]

2025-02-03 Thread Sean Mullan
On Mon, 3 Feb 2025 19:18:23 GMT, Ben Perez wrote: >> There are quite some places in API specifications that use the term >> "secret-key". This is not a formal term. Consider replacing them with >> "secret key". > > Ben Perez has updated the pull request incrementally with one additional > comm

Re: RFR: 8349106: Change ChaCha20 intrinsic to use quarter-round parallel implementation on aarch64

2025-02-03 Thread Andrew Haley
On Mon, 3 Feb 2025 16:14:23 GMT, Jamil Nimeh wrote: > In terms of explaining the algorithm changes, I could add some comment text > to the header of the stub function that better explains the general idea > behind what is being done. It would certainly help anyone maintaining it down > the lin

Re: RFR: 8261513: Various BasicConstraintsExtension issues [v3]

2025-02-03 Thread Ben Perez
> 8261513: Various BasicConstraintsExtension issues Ben Perez has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains three additional commits since the last r

Re: RFR: 8347428: Avoid using secret-key in specifications [v2]

2025-02-03 Thread Ben Perez
> There are quite some places in API specifications that use the term > "secret-key". This is not a formal term. Consider replacing them with "secret > key". Ben Perez has updated the pull request incrementally with one additional commit since the last revision: fixed copyright dates --

Re: RFR: 8349151: Refactor test/java/security//cert/CertificateFactory/slowstream.sh to java test [v2]

2025-02-03 Thread Mikhail Yankelevich
On Fri, 31 Jan 2025 18:01:28 GMT, Matthew Donovan wrote: >> Mikhail Yankelevich has updated the pull request incrementally with one >> additional commit since the last revision: >> >> cleanup > > test/jdk/java/security/cert/CertificateFactory/SlowStream.java line 52: > >> 50:

Re: RFR: 8349151: Refactor test/java/security//cert/CertificateFactory/slowstream.sh to java test [v2]

2025-02-03 Thread Mikhail Yankelevich
> Refactor test/java/security//cert/CertificateFactory/slowstream.sh to java > test Mikhail Yankelevich has updated the pull request incrementally with one additional commit since the last revision: cleanup - Changes: - all: https://git.openjdk.org/jdk/pull/23394/files - new

Re: RFR: 8348561: Add aarch64 intrinsics for ML-DSA [v2]

2025-02-03 Thread Ferenc Rakoczi
On Thu, 30 Jan 2025 16:23:56 GMT, Andrew Dinn wrote: > @ferakocz I'm afraid you lucked out on getting your change committed before > my reorganization of the stub generation code. If you are unsure of how to do > the merge so your new stub is declared and generated following the new model > (s

Re: RFR: 8347428: Avoid using secret-key in specifications

2025-02-03 Thread Sean Mullan
On Tue, 28 Jan 2025 20:08:31 GMT, Ben Perez wrote: > There are quite some places in API specifications that use the term > "secret-key". This is not a formal term. Consider replacing them with "secret > key". Some of the copyright dates need to be updated. Also, I noticed another instance in

Re: RFR: 8347938: Switch to latest ML-KEM private key encoding [v6]

2025-02-03 Thread Weijun Wang
On Mon, 3 Feb 2025 15:57:30 GMT, Weijun Wang wrote: >> The private key encoding formats of ML-KEM and ML-DSA are updated to match >> the latest IERTF drafts at: >> https://datatracker.ietf.org/doc/html/draft-ietf-lamps-dilithium-certificates-06 >> and >> https://datatracker.ietf.org/doc/html/

Re: RFR: 8349106: Change ChaCha20 intrinsic to use quarter-round parallel implementation on aarch64

2025-02-03 Thread Jamil Nimeh
On Mon, 3 Feb 2025 10:56:28 GMT, Andrew Haley wrote: >> This enhancement makes a change to the ChaCha20 block function intrinsic on >> aarch64, moving away from the block parallel implementation and to the >> quarter-round parallel implementation that was done on x86_64. Assembly >> language

Re: RFR: 8348561: Add aarch64 intrinsics for ML-DSA [v4]

2025-02-03 Thread Ferenc Rakoczi
> By using the aarch64 vector registers the speed of the computation of the > ML-DSA algorithms (key generation, document signing, signature verification) > can be approximately doubled. Ferenc Rakoczi has updated the pull request incrementally with one additional commit since the last revision

Re: RFR: 8347938: Switch to latest ML-KEM private key encoding [v6]

2025-02-03 Thread Weijun Wang
> The private key encoding formats of ML-KEM and ML-DSA are updated to match > the latest IERTF drafts at: > https://datatracker.ietf.org/doc/html/draft-ietf-lamps-dilithium-certificates-06 > and > https://datatracker.ietf.org/doc/html/draft-ietf-lamps-kyber-certificates-07. > Most importantly

Re: RFR: 8348561: Add aarch64 intrinsics for ML-DSA [v3]

2025-02-03 Thread Ferenc Rakoczi
> By using the aarch64 vector registers the speed of the computation of the > ML-DSA algorithms (key generation, document signing, signature verification) > can be approximately doubled. Ferenc Rakoczi has updated the pull request with a new target base due to a merge or a rebase. The pull requ

Re: RFR: 8349106: Change ChaCha20 intrinsic to use quarter-round parallel implementation on aarch64

2025-02-03 Thread Andrew Haley
On Fri, 31 Jan 2025 16:48:09 GMT, Jamil Nimeh wrote: > This enhancement makes a change to the ChaCha20 block function intrinsic on > aarch64, moving away from the block parallel implementation and to the > quarter-round parallel implementation that was done on x86_64. Assembly > language prof