Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8261433

Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

    XMLWordPrintable

Details

    Backports

      Description

        For Ciphers running through the CKM_AES_GCM SunPKCS11 mechanism - two types of CK_GCM_PARAMS struct are used in order to deal with interoperability issues introduced with PKCS#11 v2.40. (JDK-8080462/JDK-8229243)

        CK_GCM_PARAMS_NO_IVBITS is attempted first. If that fails, then CK_GCM_PARAMS is attempted.

        This is a performance hit since only the 2nd struct is successful in both NSS and Solaris libpkcs11 where PKCS#11 spec version is 2.40 and above.

        e.g:
        /2: lseek(15, 0x0001B390, SEEK_SET) = 111504
        /2: read(15, "85 R m S12 Q18 =97B7 ] p".., 579) = 579
        /2@2: -> libpkcs11:C_EncryptInit(0x1005d6770, 0x1007a46a0, 0x1005fa840, 0x0)
        /2@2: -> libucrypto:crypto_encrypt_init(0xffffffff7f2eee08, 0xffffffff7f2eee20, 0x0, 0x1005d68b8)
        /2@2: <- libucrypto:crypto_encrypt_init() = 29
        /2@2: <- libpkcs11:C_EncryptInit() = 113
        /2@2: -> libpkcs11:C_EncryptInit(0x1005d6770, 0x1007a46a0, 0x1005fa840, 0x71)
        /2@2: -> libucrypto:crypto_encrypt_init(0xffffffff7f2eee08, 0xffffffff7f2eee20, 0x0, 0x1005d68b8)
        /2@2: <- libucrypto:crypto_encrypt_init() = 0
        /2@2: <- libpkcs11:C_EncryptInit() = 0

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8332590 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8333134 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8333425 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8333683 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8333708 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8333999 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8335153 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8335175 Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit

            • P3 - Major loss of function.
            • Resolved
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8229243 SunPKCS11-Solaris provider tests failing on Solaris 11.4

            • P3 - Major loss of function.
            • Closed

            Enhancement - null JDK-8080462 Update SunPKCS11 provider with PKCS11 v2.40 support

            • P3 - Major loss of function.
            • Resolved
            links to

            Commit Commit openjdk/jdk11u-dev/e61adf68

            Commit Commit openjdk/jdk17u-dev/d3c1ad34

            Commit Commit openjdk/jdk21u-dev/594b3099

            Commit Commit openjdk/jdk22u/98362090

            Commit Commit openjdk/jdk/7c2c24fc

            Review Review openjdk/jdk11u-dev/2811

            Review Review openjdk/jdk17u-dev/2560

            Review Review openjdk/jdk21u-dev/645

            Review Review openjdk/jdk22u/203

            Review Review openjdk/jdk/18425

            Activity

              People

                pkumaraswamy Prajwal Kumaraswamy
                coffeys Sean Coffey
                Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: