<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 01/06/2016 03:42, Jim Manico wrote:<br>
</div>
<blockquote
cite="mid:932627b8-fc49-595a-c9e7-ad330f7a7a68@owasp.org"
type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<p>I think this is the right answer.</p>
<p>From
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://stackoverflow.com/questions/27323858/java-6-ecdhe-cipher-suite-support">https://stackoverflow.com/questions/27323858/java-6-ecdhe-cipher-suite-support</a><br>
</p>
<p>
<meta charset="utf-8">
<span style="color: rgb(36, 39, 41); font-family: Arial,
"Helvetica Neue", Helvetica, sans-serif; font-size:
15px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 19.5px; orphans:
auto; text-align: left; text-indent: 0px; text-transform:
none; white-space: normal; widows: 1; word-spacing: 0px;
-webkit-text-stroke-width: 0px; display: inline !important;
float: none; background-color: rgb(255, 255, 255);">The
SSL/TLS implementation "JSSE" in Java 1.6 and later supports
ECDHE suites<span class="Apple-converted-space"> </span></span><strong
style="margin: 0px; padding: 0px; border: 0px; font-size:
15px; font-weight: bold; color: rgb(36, 39, 41); font-family:
Arial, "Helvetica Neue", Helvetica, sans-serif;
font-style: normal; font-variant: normal; letter-spacing:
normal; line-height: 19.5px; orphans: auto; text-align: left;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);">IF there is an
available (JCE) provider</strong><span style="color: rgb(36,
39, 41); font-family: Arial, "Helvetica Neue",
Helvetica, sans-serif; font-size: 15px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 19.5px; orphans: auto; text-align: left;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px;
display: inline !important; float: none; background-color:
rgb(255, 255, 255);"><span class="Apple-converted-space"> </span>for
needed ECC primitives.<span class="Apple-converted-space"> </span></span><strong
style="margin: 0px; padding: 0px; border: 0px; font-size:
15px; font-weight: bold; color: rgb(36, 39, 41); font-family:
Arial, "Helvetica Neue", Helvetica, sans-serif;
font-style: normal; font-variant: normal; letter-spacing:
normal; line-height: 19.5px; orphans: auto; text-align: left;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);">Java 1.6 OOTB does NOT</strong><span
style="color: rgb(36, 39, 41); font-family: Arial,
"Helvetica Neue", Helvetica, sans-serif; font-size:
15px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 19.5px; orphans:
auto; text-align: left; text-indent: 0px; text-transform:
none; white-space: normal; widows: 1; word-spacing: 0px;
-webkit-text-stroke-width: 0px; display: inline !important;
float: none; background-color: rgb(255, 255, 255);"><span
class="Apple-converted-space"> </span>include such an ECC
provider, but you can add one.<span
class="Apple-converted-space"> </span></span><strong
style="margin: 0px; padding: 0px; border: 0px; font-size:
15px; font-weight: bold; color: rgb(36, 39, 41); font-family:
Arial, "Helvetica Neue", Helvetica, sans-serif;
font-style: normal; font-variant: normal; letter-spacing:
normal; line-height: 19.5px; orphans: auto; text-align: left;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);">Java 7 and 8 do</strong><span
style="color: rgb(36, 39, 41); font-family: Arial,
"Helvetica Neue", Helvetica, sans-serif; font-size:
15px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 19.5px; orphans:
auto; text-align: left; text-indent: 0px; text-transform:
none; white-space: normal; widows: 1; word-spacing: 0px;
-webkit-text-stroke-width: 0px; display: inline !important;
float: none; background-color: rgb(255, 255, 255);"><span
class="Apple-converted-space"> </span>include SunECC
provider.</span></p>
</blockquote>
I don't believe Ayaskant's query was specific to ECC. In any case,
the above answer isn't accurate. ECC support is available OOTB in
JDK <br>
6 for Solaris. It's provided via the SunPKCS11 provider. SunEC
provider was added in JDK 7:<br>
<a class="moz-txt-link-freetext" href="http://docs.oracle.com/javase/7/docs/technotes/guides/security/SunProviders.html#SunEC">http://docs.oracle.com/javase/7/docs/technotes/guides/security/SunProviders.html#SunEC</a><br>
<br>
regards,<br>
Sean.<br>
<blockquote
cite="mid:932627b8-fc49-595a-c9e7-ad330f7a7a68@owasp.org"
type="cite">
<p>- Jim<br>
</p>
<br>
<div class="moz-cite-prefix">On 5/29/16 8:02 PM, Ayaskant Swain
wrote:<br>
</div>
<blockquote
cite="mid:CAJo85JbxfS=x=aF2L2FK5CJTm4vd4C0FMAU4Eoh-cLOQJDmGHA@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>Can anyone please help me know about this - Does JSSE
library implement the Ciphers or Algorithms of a SSL
protocol ? I see the jsse.jar library shipped with the JDK.
I read the the Oracle document about JSSE - <a
moz-do-not-send="true"
href="http://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/JSSERefGuide.html#Introduction"><a class="moz-txt-link-freetext" href="http://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/JSSERefGuide.html#Introduction">http://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/JSSERefGuide.html#Introduction</a></a></div>
<div><br>
</div>
<div>So my question is - does the JSSE implement the Ciphers
or Algorithms that are used for a successful SSL handshake ,
server authentication, data integrity & data
confidentiality (Application data encryption).</div>
<div><br>
</div>
<div>Example of cipher suites - <b>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
or </b><b>TLS_DHE_RSA_WITH_AES_128_GCM_SHA256</b></div>
<div><b><br>
</b></div>
<div>So is the coding of the above ciphers have been done in
the JSSE library?</div>
<div><br>
</div>
<div>Thanks</div>
<div>Ayaskant</div>
<div>Bangalore</div>
</div>
</blockquote>
<br>
</blockquote>
<br>
</body>
</html>