Loading...

XML

Word

Printable

Type: Enhancement
Resolution: Fixed
Priority: P3
Fix Version/s: 13
Affects Version/s: 8, 11, 14
Component/s: security-libs
Labels:

Subcomponent:
javax.crypto:pkcs11
Resolved In Build:
b25
CPU:

generic
OS:

generic

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-8226082	14	Valerie Peng	P3	Resolved	Fixed	team
JDK-8228662	11.0.6-oracle	Sean Coffey	P3	Resolved	Fixed	b01
JDK-8233824	11.0.6	Christoph Langer	P3	Resolved	Fixed	b04
JDK-8252510	openjdk8u272	Martin Balao Alonso	P3	Resolved	Fixed	b06
JDK-8228663	8u241	Sean Coffey	P3	Resolved	Fixed	b01
JDK-8235034	emb-8u241	Sean Coffey	P3	Resolved	Fixed	team

Update SunPKCS11 provider with the PKCS#11 v2.40 header files and support more algorithms commonly implemented by most PKCS11 libraries.
This includes syncing up SunPKCS11 provider to the supported algorithms of other default java providers when the corresponding mechanisms are supported in PKCS#11 v2.40 spec (see suggested list of algorithms below):

    MessageDigest: SHA-512/224, SHA-512/256
    MAC: HmacSHA512/224, HmacSHA512/256
    Signature: RSASSA-PSS, SHA1withRSASSA-PSS, SHA224withRSASSA-PSS, SHA256withRSASSA-PSS, SHA384withRSASSA-PSS, SHA512withRSASSA-PSS, SHA224withDSA, SHA256withDSA, SHA384withDSA, SHA512withDSA
    Cipher: AES/GCM/NoPadding, AES_128/GCM/NoPadding, AES_192/GCM/NoPadding, AES_256/GCM/NoPadding

In addition, it'd be good to print out unsupported algorithms, parse new attributes, and error codes defined in PKCS#11 v2.40 spec.

PKCS#11 v2.40 (w/ Errata incorporated)
Base Spec: http://docs.oasis-open.org/pkcs11/pkcs11-base/v2.40/errata01/os/pkcs11-base-v2.40-errata01-os-complete.html
Profile: http://docs.oasis-open.org/pkcs11/pkcs11-profiles/v2.40/pkcs11-profiles-v2.40.html
Current Mechanisms: http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/errata01/os/pkcs11-curr-v2.40-errata01-os-complete.html
Historical Mechanisms: http://docs.oasis-open.org/pkcs11/pkcs11-hist/v2.40/pkcs11-hist-v2.40.html
Usage Guide: http://docs.oasis-open.org/pkcs11/pkcs11-ug/v2.40/pkcs11-ug-v2.40.html

backported by

JDK-8226082 Update SunPKCS11 provider with PKCS11 v2.40 support

Resolved

JDK-8228662 Update SunPKCS11 provider with PKCS11 v2.40 support

Resolved

JDK-8228663 Update SunPKCS11 provider with PKCS11 v2.40 support

Resolved

JDK-8233824 Update SunPKCS11 provider with PKCS11 v2.40 support

Resolved

JDK-8235034 Update SunPKCS11 provider with PKCS11 v2.40 support

Resolved

JDK-8252510 Update SunPKCS11 provider with PKCS11 v2.40 support

Resolved

blocks

JDK-8029661 Support TLS v1.2 algorithm in SunPKCS11 provider

Resolved

csr for

JDK-8221442 Update SunPKCS11 provider with PKCS11 v2.40 support

Closed

duplicates

JDK-8217611 PKCS11 module unable to negotiate TLSv1.3 with RSASSA-PSS

Closed

JDK-6793099 CKA_WRAP_WITH_TRUSTED can't be specified as an attribute in the SunPKCS11 config

Closed

relates to

JDK-8228835 Memory leak in PKCS11 provider when using AES GCM

Resolved

JDK-8228645 Don't run sun/security/pkcs11/Cipher/TestKATForGCM.java on buggy NSS solaris versions

Resolved

JDK-8282077 PKCS11 provider C_sign() impl should handle CKR_BUFFER_TOO_SMALL error

Resolved

JDK-8225695 32-bit build failures after JDK-8080462 (Update SunPKCS11 provider with PKCS11 v2.40 support)

Closed

JDK-8325162 Remove duplicate GCMParameters class

Resolved

JDK-8226651 Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no effect

Resolved

JDK-8238898 Missing hash characters for header on license file

Closed

JDK-8307185 pkcs11 native libraries make JNI calls into java code while holding GC lock

Closed

JDK-8229243 SunPKCS11-Solaris provider tests failing on Solaris 11.4

Closed

JDK-8261433 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

Closed

(1 backported by, 1 blocks, 1 csr for, 2 duplicates, 10 relates to)

1.	Release Note: SunPKCS11 Provider Upgraded with Support for PKCS#11 v2.40		Closed	Valerie Peng
2.	Update doc accordingly for the SunPKCS11 provider v2.40 changes		Resolved	Raymond Gallardo

Assignee:: Valerie Peng

Reporter:: Valerie Peng

Votes:: 0 Vote for this issue

Watchers:: 13 Start watching this issue

Created:: 2015-05-14 18:50

Updated:: 2024-02-02 02:48

Resolved:: 2019-06-11 14:36

Details

Backports

Description

Attachments

Issue Links

Sub-Tasks

Activity

People

Dates