Re: RFR [11] CSR for "Add Brainpool ECC support (RFC 5639)"

va.net/jdk/jdk/file/tip/src/java.base/share/classes/sun/security/ssl/NamedGroup.java > Gruss > Bernd > > > -- > http://bernd.eckenfels.net >   > -------- > *Von:* security-dev im Auftrag > von Tob

AW: RFR [11] CSR for "Add Brainpool ECC support (RFC 5639)"

Hi Valerie and Bernd, Valerie is right, I tested my JTREG Tests against SoftHSM2 in March: http://mail.openjdk.java.net/pipermail/security-dev/2018-March/016863.html I don't think there are more PKCS#11 related issues, as SunEC is not a PKCS#11 implementation. There are only shared tests. The

RFR [11] CSR for "Add Brainpool ECC support (RFC 5639)"

smime.p7m Description: S/MIME encrypted message

[PATCH]: Support for brainpool curves from CurveDB in SunEC

Hi Valerie and Tomas, thanks for the hint about SoftHSM. I just found the time to test it. I was able to run TestECDH using it with a SoftHSM2 based SunPKCS11 provider. I did not hear anything about my last response - so I hope, this it might be helpful. I wonder if there is anything left to

AW: [PATCH]: Support for brainpool curves from CurveDB in SunEC

rovider SunPKCS11-NSS (28 ms). ... Regards, Tobias -Ursprüngliche Nachricht----- > Von:Valerie Peng <valerie.p...@oracle.com> > Gesendet: Fre 9 Februar 2018 02:03 > An: Tobias Wagner <tobias.wag...@n-design.de>; security-dev@openjdk.java.net > Betreff: Re: [PATCH]: Support

[PATCH]: Support for brainpool curves from CurveDB in SunEC

r and runs ECDSA signatures and verifications with all of them. The results of all curves are logged in the jtreg report of TestEC. I also changed the InvalidCurve test to use brainpoolP160r1 now, as brainpoolP256r1 is supported by using this patch. > > On 1/12/2018 9:12 AM,

[PATCH]: Support for brainpool curves from CurveDB in SunEC

Hi, here is the next patch for brainpool curve support in SunEC. Differences from the first patch: * Brainpool curves with less than 256 bits are removed. Subsequently, the curve oid check is made more robust to avoid null pointer caused Segmentation Faults in memcmp calls. * Bug JDK-8189594

[PATCH]: Support for brainpool curves from CurveDB in SunEC

Hi and a happy new year, I did some further work reagarding the brainpool curves. For the points about the removal of the small curves and the challenges with that, please see below. Regarding the test vectors for the brainpool curves, I'm planning to add a new jtreg test to sun.security.ec

[PATCH]: Support for brainpool curves from CurveDB in SunEC

-Ursprüngliche Nachricht- > Von:Adam Petcher <adam.petc...@oracle.com> > Gesendet: Fre 15 Dezember 2017 20:57 > An: security-dev@openjdk.java.net > Betreff: Re: [PATCH]: Support for brainpool curves from CurveDB in SunEC > > On 12/15/2017 11:31 AM, Tobias

[PATCH]: Support for brainpool curves from CurveDB in SunEC

Hi, in our current project, we have the requirement to support brainpool curves for TLS connections (RFC 7027). As part of this requirement, we introduced the brainpoolP*r1 curves to SunEC, as they are already known in sun.security.util.CurveDB. It does not introduce the twisted curves from

AW: Arithmetic error in SunEC

le.com> > Gesendet: Die 17 Oktober 2017 22:26 > An: security-dev@openjdk.java.net > Betreff: Re: Arithmetic error in SunEC > > On 10/17/2017 4:55 AM, Tobias Wagner wrote: > > > Hi, > > > > we found an error in the GF(p)-arithmetics of SunEC, while adding >

Arithmetic error in SunEC

Hi, we found an error in the GF(p)-arithmetics of SunEC, while adding support for brainpool-curves in ECDHE for TLS connections as suggested in RFC 7027. BrainpoolP256r1 and brainpoolP512r1 worked out of the box, but brainpoolP384r1 did not. The calculated public keys were not on that curve and