| 6e736056d64d0e33b26cf9f7c4e351b496241fde |
|
26-Feb-2011 |
Brian Carlstrom <bdc@google.com> |
bouncycastle 1.46 upgrade
Change-Id: I01be307de0a79b3058215d76e67f39f77243a619
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
|
| 0d31ca0f54efe12f12049174bfa9403961654a92 |
|
20-Aug-2010 |
Brian Carlstrom <bdc@google.com> |
Remove RC5 references from bouncycastle
The RI doesn't include RC5 and we didn't either in the provider
definition, but I noticed we still had a few implementation support
classes so remove these unneeded files.
Also cleaned up a few RC2 mentions that are unneeded.
RC2 implementation does remain for PKCS12 support.
Change-Id: I4ef304e11a0cba677b3977c54a2afb2330ca5565
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
|
| e0e967cc691aa03a9776e5c4af763cd882845fc3 |
|
24-Aug-2010 |
Brian Carlstrom <bdc@google.com> |
Restore PBE Ciphers and SecreyKeyFactories if underlying algorithm is supported for better PKCS12 support
This restores the Password Based Encryption (PBE) algorithms when we
were including the underlying algorithms used (3DES, AES, DES, MD5,
RC2, SHA1, SHA256)
Specficially we leave out PBE definitions that include algorithms such
as MD2, RIPEMD, Tiger that are not in our BouncyCastle jar.
Bug: 2942581
Change-Id: I0a4ecc5b90b08b593b92a0a8adfea8f582f77da6
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
|
| 7493aa25d0d0a0b8396ebfc6e1395ffdfb6045d5 |
|
19-Aug-2010 |
Brian Carlstrom <bdc@google.com> |
Restoring blowfish to bouncycastle
Adding blowfish algoritms for RI parity.
Also added KeyGenerator.ARCFOUR alias for RI compatability.
Change-Id: I1ddf86bdc82a1056f3f671743709e9186e95f7c3
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
|
| 8e551503a8d09fb57fd4efe9a2aa0392e7ba56e9 |
|
13-Jul-2010 |
Brian Carlstrom <bdc@google.com> |
Fix PKCS12 and BKS KeyStore as well as SSL renegotiation
Summary:
- Added KeyStoreTest and fixed PKCS and BKS keystores to be fully functional
- KeyStore and KeyStoreImpl improvements in libcore and bouncycastle for more RI-like behavior
- SSL Renegotiation fix for new implementation
Details:
external/bouncycastle
TwoFish added back for BKS KeyStore. Like RC2, it not supported as
a general cipher, but instead used internally for KeyStore
implementation.
src/main/java/org/bouncycastle/crypto/engines/TwofishEngine.java
bouncycastle.config
Added back PBEWITHSHAANDTWOFISH, PBEWITHSHAANDTWOFISH-CBC,
PBEWITHSHA1ANDRC2-CBC, PBEWITHHMACSHA, PBEWITHHMACSHA1 to support
PKCS12 and BKS KeyStore implementations (as determined by new
KeyStoreTest)
src/main/java/org/bouncycastle/jce/provider/BouncyCastleProvider.java
src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
src/main/java/org/bouncycastle/jce/provider/JCEMac.java
src/main/java/org/bouncycastle/jce/provider/JCESecretKeyFactory.java
Don't throw an error when deleting a non-existing KeyStore entry. The
RI documentation (and behavior) says it throws an error when it fails
to remove an entry, not when the entry does not exist.
src/main/java/org/bouncycastle/jce/provider/JDKKeyStore.java
src/main/java/org/bouncycastle/jce/provider/JDKPKCS12KeyStore.java
Try to make BC's PKCS KeyStore have a more RI-like getCreationDate behavior
src/main/java/org/bouncycastle/jce/provider/JDKPKCS12KeyStore.java
Make BC's PKCS KeyStore failfast on setting non-supported key,
instead of failing later on get.
src/main/java/org/bouncycastle/jce/provider/JDKPKCS12KeyStore.java
Make BC's PKCS KeyStore handle setting a PrivateKey with an emtpy chain.
src/main/java/org/bouncycastle/jce/provider/JDKPKCS12KeyStore.java
Add more general avoidance of NullPointerExceptions on null aliases
src/main/java/org/bouncycastle/jce/provider/JDKPKCS12KeyStore.java
Added notes about changes improvements
patches/README
Regenerated patch with above changes
patches/android.patch
libcore
KeyStore improvements based on KeyStoreTest
- Fix UnrecoverableKeyException to be a subclass of
UnrecoverableEntryException, which was keeping the new
KeyStoreTest from compiling.
luni/src/main/java/java/security/UnrecoverableKeyException.java
- Fix to not convert UnrecoverableKeyException to KeyStoreException,
which was only being done because of the UnrecoverableKeyException
superclass bug.
luni/src/main/java/java/security/KeyStoreSpi.java
- Harmony KeyStore was being overly aggresive about throwing on null
alias arguments in cases where the RI was happy to pass them to the
KeyStoreSpi.
luni/src/main/java/java/security/KeyStore.java
- New test after PKCS12 regresion. It enumerates and excercises
all methods on all available KeyStore
implementations. Unfortunately, the main varieties of KeyStores
made this a lot more complicated than I was originally
expecting. It does clarifiy the differences between the RI and
BC KeyStore implementations, especially for PKCS12, where in
some ways the RI is more feature complete (setting key via
byte[]), but in other ways BC goes beyond some RI limitations
(allowing storage of certificates).
luni/src/test/java/java/security/KeyStoreTest.java
TestKeyStore improvements while writing KeyStoreTest
- Renamed "keyStorePassword" working usages to clarify if it really
means the "storePassword" on the whole KeyStore, or if it is a
"keyPassword" on individual keys.
- Moved TestKeyStore from javax.net.ssl to java.security
luni/src/test/java/javax/net/ssl/SSLContextTest.java
luni/src/test/java/javax/net/ssl/SSLEngineTest.java
luni/src/test/java/javax/net/ssl/SSLSessionTest.java
luni/src/test/java/javax/net/ssl/SSLSocketTest.java
support/src/test/java/java/security/StandardNames.java
support/src/test/java/java/security/TestKeyStore.java
support/src/test/java/javax/net/ssl/TestKeyStore.java
support/src/test/java/javax/net/ssl/TestSSLContext.java
Fixing up SSL renegotiation support. Now that we are not trying to
prevent renegotiation, make sure it is working correctly.
- Remove SSL_VERIFY_CLIENT_ONCE to take the default behavior of
re-requesting client certificate on renegotiation.
luni/src/main/java/org/apache/harmony/xnet/provider/jsse/NativeCrypto.java
luni/src/main/java/org/apache/harmony/xnet/provider/jsse/OpenSSLSocketImpl.java
- Updated comments to reflect renegotiation. Bug fix to not clear
out callback reference on handshake complete, since we need it for
renegotiation.
luni/src/main/native/NativeCrypto.cpp
Updated for PKCS12 KeyStore support
support/src/test/java/java/security/StandardNames.java
Added javadoc when writint KeyStoreTest
luni/src/test/java/java/security/ProviderTest.java
frameworks/base
Tracking changes to UnrecoverableKeyException superclass
api/8.xml
api/current.xml
Change-Id: Idd09289b7ec510a2d981769e7bf077b101c26f88
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
|
| b04bbc72336971137c5f3daceb4846605214d22b |
|
01-Jul-2010 |
Brian Carlstrom <bdc@google.com> |
Trim BouncyCastle *-OpenSSL algorithms
These were not previously removed because they were believed to be part
of Android OpenSSL native implementation.
Change-Id: I00c4c70bd1950125c25c3d33747a8e1e3cdc85d4
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
|
| 7a6b43b187fb942402daa61e0b92496746f5bc1c |
|
21-Jun-2010 |
Brian Carlstrom <bdc@google.com> |
Aligning bouncycastle with RI supported algorithms
Change-Id: I81156564372ac60d009e62fa9f8ef0ff2239dda5
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
|
| c37f4a04ef89e73a39a59f3c5a179af8c8ab5974 |
|
21-Jun-2010 |
Brian Carlstrom <bdc@google.com> |
Upgrade bouncycastle from 1.34 to 1.45
This maintains the same set of provided algorithms as tested with
libcore's javax.security.PreparerTest. A further checkin will try to
bring the supported list in line with the RI.
Details:
Upgraded to JDK 1.6 version of 1.45 release
bouncycastle.version
First pass of triming unneeded files
bouncycastle.config
Compile with UTF-8 to avoid warnings
Android.mk
The updated patch
patches/android.patch
The rest of the files are generated from the release tar ball and the patch
./import_bouncycastle.sh import .../bcprov-jdk16-145.tar.gz
src/main/java/...
Change-Id: I1df5ad8a7161ec578415ae23f01c3b550e381927
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
|
| b61a96e7ef1a78acf013bbf08fe537e5b5f129ca |
|
26-Apr-2010 |
Peter Hallam <peterhal@google.com> |
merge more modules into luni
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/JCEBlockCipher.java
|