[jdk11u-dev] Integrated: 8140466: ChaCha20 and Poly1305 TLS Cipher Suites

Alexey Bakhtin abakhtin at openjdk.java.net
Mon Jun 28 16:47:04 UTC 2021


On Wed, 23 Jun 2021 13:46:57 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

> This backport adds ChaCha20 cipher suites to 11u implementation for TLSv1.3 and TLSv1.2 protocols.
> TLS_CHACHA20_POLY1305_SHA256 is one of the cipher suites SHOULD be implemented according to rfc8446 [1].
> 
> The original patch applies almost clean except for the test/jdk/javax/net/ssl/TLSCommon/CipherSuite.java file - the list of cipher suites was reordered by JDK-8210632 [2]
> 
> Also, I had to update two jtreg tests with ChaCha cipher suites:
> test/jdk/javax/net/ssl/sanity/ciphersuites/CheckCipherSuites.java is updated because of JDK-8217579 [3] backport to 11u missed CHACHA20 cipher suites
> 
> test/jdk/javax/net/ssl/sanity/ciphersuites/CipherSuitesInOrder.java is updated because of JDK-8234728 [4] backport to 11u missed CHACHA20 cipher suites
> 
> sun/security/ssl and javax/net/ssl tests passed
> 
> [1] - https://datatracker.ietf.org/doc/html/rfc8446
> [2] - https://bugs.openjdk.java.net/browse/JDK-8210632
> [3] - https://bugs.openjdk.java.net/browse/JDK-8217579
> [4] - https://bugs.openjdk.java.net/browse/JDK-8234728

This pull request has now been integrated.

Changeset: e62d6a2f
Author:    Alexey Bakhtin <abakhtin at openjdk.org>
Committer: Vladimir Kempik <vkempik at openjdk.org>
URL:       https://git.openjdk.java.net/jdk11u-dev/commit/e62d6a2f388dda2678b59e079e7e879a46164ce2
Stats:     611 lines in 7 files changed: 607 ins; 3 del; 1 mod

8140466: ChaCha20 and Poly1305 TLS Cipher Suites

Reviewed-by: mdoerr
Backport-of: 962e755c3ac6731566fe9f39520a414628f24ee0

-------------

PR: https://git.openjdk.java.net/jdk11u-dev/pull/59


More information about the jdk-updates-dev mailing list