Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8080462

Update SunPKCS11 provider with PKCS11 v2.40 support

    XMLWordPrintable

Details

    Backports

      Description

        Update SunPKCS11 provider with the PKCS#11 v2.40 header files and support more algorithms commonly implemented by most PKCS11 libraries.
        This includes syncing up SunPKCS11 provider to the supported algorithms of other default java providers when the corresponding mechanisms are supported in PKCS#11 v2.40 spec (see suggested list of algorithms below):

            MessageDigest: SHA-512/224, SHA-512/256
            MAC: HmacSHA512/224, HmacSHA512/256
            Signature: RSASSA-PSS, SHA1withRSASSA-PSS, SHA224withRSASSA-PSS, SHA256withRSASSA-PSS, SHA384withRSASSA-PSS, SHA512withRSASSA-PSS, SHA224withDSA, SHA256withDSA, SHA384withDSA, SHA512withDSA
            Cipher: AES/GCM/NoPadding, AES_128/GCM/NoPadding, AES_192/GCM/NoPadding, AES_256/GCM/NoPadding

        In addition, it'd be good to print out unsupported algorithms, parse new attributes, and error codes defined in PKCS#11 v2.40 spec.

        PKCS#11 v2.40 (w/ Errata incorporated)
        Base Spec: http://docs.oasis-open.org/pkcs11/pkcs11-base/v2.40/errata01/os/pkcs11-base-v2.40-errata01-os-complete.html
        Profile: http://docs.oasis-open.org/pkcs11/pkcs11-profiles/v2.40/pkcs11-profiles-v2.40.html
        Current Mechanisms: http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/errata01/os/pkcs11-curr-v2.40-errata01-os-complete.html
        Historical Mechanisms: http://docs.oasis-open.org/pkcs11/pkcs11-hist/v2.40/pkcs11-hist-v2.40.html
        Usage Guide: http://docs.oasis-open.org/pkcs11/pkcs11-ug/v2.40/pkcs11-ug-v2.40.html

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8226082 Update SunPKCS11 provider with PKCS11 v2.40 support

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8228662 Update SunPKCS11 provider with PKCS11 v2.40 support

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8228663 Update SunPKCS11 provider with PKCS11 v2.40 support

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8233824 Update SunPKCS11 provider with PKCS11 v2.40 support

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8235034 Update SunPKCS11 provider with PKCS11 v2.40 support

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8252510 Update SunPKCS11 provider with PKCS11 v2.40 support

            • P3 - Major loss of function.
            • Resolved
            blocks

            Enhancement - null JDK-8029661 Support TLS v1.2 algorithm in SunPKCS11 provider

            • P3 - Major loss of function.
            • Resolved
            csr for

            CSR - null JDK-8221442 Update SunPKCS11 provider with PKCS11 v2.40 support

            • P3 - Major loss of function.
            • Closed
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8228835 Memory leak in PKCS11 provider when using AES GCM

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8228645 Don't run sun/security/pkcs11/Cipher/TestKATForGCM.java on buggy NSS solaris versions

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8282077 PKCS11 provider C_sign() impl should handle CKR_BUFFER_TOO_SMALL error

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8225695 32-bit build failures after JDK-8080462 (Update SunPKCS11 provider with PKCS11 v2.40 support)

            • P1 - Blocks development and/or testing work, production could not run.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-8261433 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

            • P3 - Major loss of function.
            • In Progress

            Bug - A problem which impairs or prevents the functions of the product. JDK-8307185 pkcs11 native libraries make JNI calls into java code while holding GC lock

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8226651 Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no effect

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-6793099 CKA_WRAP_WITH_TRUSTED can't be specified as an attribute in the SunPKCS11 config

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8238898 Missing hash characters for header on license file

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-8229243 SunPKCS11-Solaris provider tests failing on Solaris 11.4

            • P3 - Major loss of function.
            • Closed

            Activity

              People

                valeriep Valerie Peng
                valeriep Valerie Peng
                Votes:
                0 Vote for this issue
                Watchers:
                13 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: