Re: [PATCH] Handle alternative Kerberos credential cache locations

2014-01-27 Thread Elliott Baron
Hi Magnus, On 01/15/2014 06:08 AM, Magnus Ihse Bursie wrote: On 2014-01-15 03:38, Wang Weijun wrote: Hi Elliott Great to see this again. I’ll come back to this later. There are some urgent issues I have to deal with at this moment. I’ll also need to get those legal advices regarding pkg.m4 e

Re: question about restricted packages

2014-01-27 Thread Vicente-Arturo Romero-Zaldivar
Hi Chris, Thanks for your answer, now I have another question :) Is there any idiom (method) to check if a package is restricted? probably checkPackageAccess()? Thanks, Vicente On 27/01/14 18:34, Chris Hegarty wrote: Take a look at the java.security-XXX files in http://hg.openjdk.java.net

Re: question about restricted packages

2014-01-27 Thread Jeff Nisewanger
But be aware that this isn't a static list -- applications or middleware can extend it at runtime (generally when they start up). Jeff > On Jan 27, 2014, at 10:34 AM, Chris Hegarty wrote: > > Take a look at the java.security-XXX files in > http://hg.openjdk.java.net/jdk8/jdk8/jdk/file/tip/sr

Re: question about restricted packages

2014-01-27 Thread Chris Hegarty
Take a look at the java.security-XXX files in http://hg.openjdk.java.net/jdk8/jdk8/jdk/file/tip/src/share/lib/security/ -Chris. On 27 Jan 2014, at 18:17, Vicente-Arturo Romero-Zaldivar wrote: > Hi, > > Is there a list of restricted packages in JDK 8? Sorry if this isn't the > right place t

Re: AES GCM slow

2014-01-27 Thread Michael StJohns
At 12:17 PM 1/27/2014, Matthew Hall wrote: >I have often had good luck accelerating such operations using the PKCS #11 >provider with a recent copy of libnss to get the native crypto. And the things >needed for this are built into Java already. Yup. https://developer.mozilla.org/en-US/docs/NSS

question about restricted packages

2014-01-27 Thread Vicente-Arturo Romero-Zaldivar
Hi, Is there a list of restricted packages in JDK 8? Sorry if this isn't the right place to ask for this. Thanks, Vicente

Re: AES GCM slow

2014-01-27 Thread Matthew Hall
I have often had good luck accelerating such operations using the PKCS #11 provider with a recent copy of libnss to get the native crypto. And the things needed for this are built into Java already. -- Sent from my mobile device. Michael StJohns wrote: >At 09:23 AM 1/27/2014, Mark Christiaens

Re: AES GCM slow

2014-01-27 Thread Michael StJohns
At 09:23 AM 1/27/2014, Mark Christiaens wrote: >Silly me, forgot to mention that I'm working on Ubuntu, 64 bit, 13.10. > >So, AES-CBC seems to be reasonably fast (100 MiB/s) but AES-GCM is slow (5.2 >MiB/s). Â I'm particularly curious about the GCM one because I get the >impression that OpenSSL s

Re: AES GCM slow

2014-01-27 Thread Mark Christiaens
Silly me, forgot to mention that I'm working on Ubuntu, 64 bit, 13.10. So, AES-CBC seems to be reasonably fast (100 MiB/s) but AES-GCM is slow (5.2 MiB/s). I'm particularly curious about the GCM one because I get the impression that OpenSSL should be able to reach in the GB/s for AES-GCM encrypti

Re: AES GCM slow

2014-01-27 Thread Xuelei Fan
What's the platform are you using for the testing? Windows, Linux, Solaris or Mac OS? GCM are now only implemented in SunJCE provider. I want to make sure the crypto provider for AES-CBC, which is different for different platforms by default, is not the major cause of the performance impact. Th

Re: AES GCM slow

2014-01-27 Thread Chris Hegarty
Cross posting to security-dev, since the question cipher related. -Chris. On 27/01/14 09:28, Mark Christiaens wrote: I wrote a little test client/server setup that transfers 100 MB of data over an SSL socket configured to use TLS 1.2 AES GCM (TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256). On my i7-