RFR: 8264849: Add KW and KWP support to PKCS11 provider
Valerie Peng
valeriep at openjdk.java.net
Fri Sep 17 23:31:41 UTC 2021
Anyone has time to review this RFE for adding AES cipher with KW, KWP modes support to SunPKCS11 provider?
The main changes are in only one new class, i.e. P11KeyWrapCipher.java, which is the CipherSpi impl for the native PKCS11 key wrap mechanisms. When testing against NSS library, it seems that they only support the single part enc/dec PKCS11 APIs, so have to use a new class as existing P11Cipher class relies on the multi part enc/dec PKCS11 APIs and do not support key wrapping/unwrapping.
The rest are minor code refactoring and updates for the PKCS11 Exception class.
The new regression tests are adapted from existing key wrap regression tests for SunJCE provider.
Thanks,
Valerie
-------------
Commit messages:
- 8264849: Add KW and KWP support to PKCS11 provider
Changes: https://git.openjdk.java.net/jdk/pull/5569/files
Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=5569&range=00
Issue: https://bugs.openjdk.java.net/browse/JDK-8264849
Stats: 2141 lines in 17 files changed: 2042 ins; 46 del; 53 mod
Patch: https://git.openjdk.java.net/jdk/pull/5569.diff
Fetch: git fetch https://git.openjdk.java.net/jdk pull/5569/head:pull/5569
PR: https://git.openjdk.java.net/jdk/pull/5569
More information about the security-dev
mailing list