Very slow performance of AES/GCM in JDK 8 SunJCE provider

2014-03-27 Thread Tim Whittington
Hi all I’ve noticed that the performance of the AES/GCM implementation in the JDK 8 SunJCE provider is very slow. On a simple micro-benchmark (standard caveats etc. etc.) encrypting 10 MB blocks of random data (not decrypt) I get the following rough throughputs: AES/ECB +UseAESIntrinsics - 600

Re: Can you give some suggestion about how build a Hacked JDK for The Malformed Certificates tests

2014-03-27 Thread Florian Weimer
On 03/27/2014 02:34 PM, Florian Weimer wrote: IIRC, I sent you a reproducer when reporting CVE-2009-3876 that does this. I haven't got it anymore, but I believe I used a trust manager Sorry, this has to be an X509KeyManager with a suitable getCertificateChain() method. that returned a sub

Re: Can you give some suggestion about how build a Hacked JDK for The Malformed Certificates tests

2014-03-27 Thread Florian Weimer
On 03/19/2014 12:55 PM, zaiyao liu wrote: Can you give some suggestion about how to bypass this kind of check to generator a certificate for invalid certificate? (I will use this invalid to attack normal JDK). IIRC, I sent you a reproducer when reporting CVE-2009-3876 that does this. I haven