Query - Does JSSE library implement the Ciphers or Algorithms of a SSL protocol ?

[Seán Coffey]

On 01/06/2016 03:42, Jim Manico wrote:
>
> I think this is the right answer.
>
> From 
> https://stackoverflow.com/questions/27323858/java-6-ecdhe-cipher-suite-support
>
> The SSL/TLS implementation "JSSE" in Java 1.6 and later supports ECDHE 
> suites*IF there is an available (JCE) provider*for needed ECC 
> primitives.*Java 1.6 OOTB does NOT*include such an ECC provider, but 
> you can add one.*Java 7 and 8 do*include SunECC provider.
>
I don't believe Ayaskant's query was specific to ECC. In any case, the 
above answer isn't accurate. ECC support is available OOTB in JDK
6 for Solaris. It's provided via the SunPKCS11 provider. SunEC provider 
was added in JDK 7:
http://docs.oracle.com/javase/7/docs/technotes/guides/security/SunProviders.html#SunEC

regards,
Sean.
>
> - Jim
>
>
> On 5/29/16 8:02 PM, Ayaskant Swain wrote:
>> Hi,
>>
>> Can anyone please help me know about this - Does JSSE library 
>> implement the Ciphers or Algorithms of a SSL protocol ? I see the 
>> jsse.jar library shipped with the JDK. I read the the Oracle document 
>> about JSSE - 
>> http://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/JSSERefGuide.html#Introduction
>>
>> So my question is - does the JSSE implement the Ciphers or Algorithms 
>> that are used for a successful SSL handshake , server authentication, 
>> data integrity & data confidentiality (Application data encryption).
>>
>> Example of cipher suites - *TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 or 
>> **TLS_DHE_RSA_WITH_AES_128_GCM_SHA256*
>> *
>> *
>> So is the coding of the above ciphers have been done in the JSSE library?
>>
>> Thanks
>> Ayaskant
>> Bangalore
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20160601/6ee38069/attachment.htm>