[jdk11u-dev] Integrated: 8140466: ChaCha20 and Poly1305 TLS Cipher Suites
Alexey Bakhtin
abakhtin at openjdk.java.net
Mon Jun 28 16:47:04 UTC 2021
On Wed, 23 Jun 2021 13:46:57 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:
> This backport adds ChaCha20 cipher suites to 11u implementation for TLSv1.3 and TLSv1.2 protocols.
> TLS_CHACHA20_POLY1305_SHA256 is one of the cipher suites SHOULD be implemented according to rfc8446 [1].
>
> The original patch applies almost clean except for the test/jdk/javax/net/ssl/TLSCommon/CipherSuite.java file - the list of cipher suites was reordered by JDK-8210632 [2]
>
> Also, I had to update two jtreg tests with ChaCha cipher suites:
> test/jdk/javax/net/ssl/sanity/ciphersuites/CheckCipherSuites.java is updated because of JDK-8217579 [3] backport to 11u missed CHACHA20 cipher suites
>
> test/jdk/javax/net/ssl/sanity/ciphersuites/CipherSuitesInOrder.java is updated because of JDK-8234728 [4] backport to 11u missed CHACHA20 cipher suites
>
> sun/security/ssl and javax/net/ssl tests passed
>
> [1] - https://datatracker.ietf.org/doc/html/rfc8446
> [2] - https://bugs.openjdk.java.net/browse/JDK-8210632
> [3] - https://bugs.openjdk.java.net/browse/JDK-8217579
> [4] - https://bugs.openjdk.java.net/browse/JDK-8234728
This pull request has now been integrated.
Changeset: e62d6a2f
Author: Alexey Bakhtin <abakhtin at openjdk.org>
Committer: Vladimir Kempik <vkempik at openjdk.org>
URL: https://git.openjdk.java.net/jdk11u-dev/commit/e62d6a2f388dda2678b59e079e7e879a46164ce2
Stats: 611 lines in 7 files changed: 607 ins; 3 del; 1 mod
8140466: ChaCha20 and Poly1305 TLS Cipher Suites
Reviewed-by: mdoerr
Backport-of: 962e755c3ac6731566fe9f39520a414628f24ee0
-------------
PR: https://git.openjdk.java.net/jdk11u-dev/pull/59
More information about the jdk-updates-dev
mailing list