RE: [EXTERNAL]Re: Use of OpenSSL as JCE security provider if available on system

2019-04-15 Thread John Gray
Entrust Datacard -Original Message- From: security-dev [mailto:security-dev-boun...@openjdk.java.net] On Behalf Of coderaptor Sent: Friday, April 12, 2019 1:15 PM To: Simone Bordet Cc: OpenJDK Dev list Subject: [EXTERNAL]Re: Use of OpenSSL as JCE security provider if available on system

Re: Use of OpenSSL as JCE security provider if available on system

2019-04-12 Thread coderaptor
I may be off-mark here (since I did not go over the mail thread with a fine comb), but one possible use is to satisfy cases where FIPS 140-2 validated library is a requirement. Currently, there are very few options in the market (BouncyCastle is FIPS 140-2, RSA BSAFE has exited), so the ability to

Re: Use of OpenSSL as JCE security provider if available on system

2019-03-21 Thread Simone Bordet
Hi, On Thu, Mar 21, 2019 at 3:43 PM Sean Mullan wrote: > But, if we want to explore this further, I think it first makes sense to > take a step back and focus more on what benefits an OpenSSL provider or > "native bridge" would provide. Benchmarked 3x-10x performance improvements. https://nbsoft

Re: Use of OpenSSL as JCE security provider if available on system

2019-03-21 Thread Sean Mullan
On 3/15/19 5:46 AM, Steve Groeger wrote: Hi all, Not sure whether something on this subject has been raised before but I was unable to see anything in the mailing lists. I don't think it has been discussed in any detail on this alias. However, there are some other libraries and toolkits that

Re: Use of OpenSSL as JCE security provider if available on system

2019-03-15 Thread Darran Lofthouse
FYI if anyone is interested in using OpenSSL through a Java security Provider we have this project available within the WildFly project: - https://github.com/wildfly/wildfly-openssl On Fri, Mar 15, 2019 at 9:48 AM Steve Groeger wrote: > Hi all, > > Not sure whether something on this subject ha

Re: Use of OpenSSL as JCE security provider if available on system

2019-03-15 Thread Norman Maurer
Actually this is not based on OpenSSL but it uses BoringSSL (which provides an OpenSSL API + some extra stuff), just in case it matters for anyone. Bye Norman > On 15. Mar 2019, at 17:37, Simone Bordet wrote: > > Hi, > > On Fri, Mar 15, 2019 at 3:28 PM Darran Lofthouse > wrote: >> FYI if an

Re: Use of OpenSSL as JCE security provider if available on system

2019-03-15 Thread Simone Bordet
Hi, On Fri, Mar 15, 2019 at 3:28 PM Darran Lofthouse wrote: > FYI if anyone is interested in using OpenSSL through a Java security Provider > we have this project available within the WildFly project: - > > https://github.com/wildfly/wildfly-openssl There is also the effort from Google, Conscry

Re: Use of OpenSSL as JCE security provider if available on system

2019-03-15 Thread Steve Groeger
t Date: 15/03/2019 13:35 Subject: Re: Use of OpenSSL as JCE security provider if available on system Sent by:"security-dev" Hi Steve, This looks interesting. I have a couple of questions: 1) Is this integrated to the JCE crypto providers framework or does it work

Re: Use of OpenSSL as JCE security provider if available on system

2019-03-15 Thread Darran Lofthouse
FYI if anyone is interested in using OpenSSL through a Java security Provider we have this project available within the WildFly project: - https://github.com/wildfly/wildfly-openssl On Fri, Mar 15, 2019 at 9:48 AM Steve Groeger wrote: > Hi all, > > Not sure whether something on this subject has

Re: Use of OpenSSL as JCE security provider if available on system

2019-03-15 Thread Martin Balao
Hi Steve, This looks interesting. I have a couple of questions: 1) Is this integrated to the JCE crypto providers framework or does it work separately? The properties "jdk.nativeCrypto" and "jdk.nativeDigest" made me think it's not. 2) Which algorithms are under scope? Kind regards, Martin.-

Re: Use of OpenSSL as JCE security provider if available on system

2019-03-15 Thread Martin Balao
Hi Steve, This looks interesting. I have a couple of questions: 1) Is this integrated to the JCE crypto providers framework or does it work separately? The properties "jdk.nativeCrypto" and "jdk.nativeDigest" made me think it's not. 2) Which algorithms are under scope? Kind regards, Martin.-