Re: RFR: 8330842: Support AES CBC with Ciphertext Stealing (CTS) in SunPKCS11 [v2]

2024-05-24 Thread Francisco Ferrari Bihurriet
> Hi, > > I would like to propose an implementation to support AES CBC with Ciphertext > Stealing (CTS) in SunPKCS11, according to what has been specified in > [JDK-8330843 CSR](https://bugs.openjdk.org/browse/JDK-8330843). > > What follows are implementation notes that describe the most releva

Re: RFR: 8330842: Support AES CBC with Ciphertext Stealing (CTS) in SunPKCS11 [v2]

2024-05-24 Thread Francisco Ferrari Bihurriet
On Thu, 23 May 2024 20:20:51 GMT, Valerie Peng wrote: >> @theRealAph: no, it looked to me easier to read if we have input-related >> parameters separated from output ones. So I did this reordering in a >> separate commit (0a777e94229723376e1264e87cbf0ba805dc736f), to distinguish >> it from the

Integrated: 8241550: [macOS] SSLSocketImpl/ReuseAddr.java failed due to "BindException: Address already in use"

2024-05-24 Thread Daniel Fuchs
On Thu, 23 May 2024 08:42:00 GMT, Daniel Fuchs wrote: > This is one of these tests that is not really fixable if any other process > that might open a socket runs concurrently with it on the same machine: > nothing can guarantee that if you open a socket, close it, then open a new > socket on

Re: RFR: 8330842: Support AES CBC with Ciphertext Stealing (CTS) in SunPKCS11 [v2]

2024-05-24 Thread Valerie Peng
On Fri, 24 May 2024 11:42:37 GMT, Francisco Ferrari Bihurriet wrote: >> Hi, >> >> I would like to propose an implementation to support AES CBC with Ciphertext >> Stealing (CTS) in SunPKCS11, according to what has been specified in >> [JDK-8330843 CSR](https://bugs.openjdk.org/browse/JDK-83308

Withdrawn: 8322767: TLS full handshake is slow with PKCS12KeyStore and X509KeyManagerImpl

2024-05-24 Thread duke
On Thu, 22 Feb 2024 01:14:24 GMT, Hai-May Chao wrote: > For the PKIX KeyManager and PKCS12 Keystore, when the TLS server sends the > ServerHello message and ultimately calls the > X509KeyManagerImpl.chooseEngineServerAlias() method, it retrieves the private > key from the keystore, decrypts it