Tencent Kona SM Suite contains a set of Java security providers, which support algorithms SM2, SM3 and SM4, and protocols TLCP/GMSSL, TLS 1.3 (with RFC 8998) and TLS 1.2.
License: Other
This is backport of JDK-8291509: Minor cleanup could be done in sun.security.
This is a backport of JDK-8294997: Improve ECC math operations.
This is a substitution of org.bouncycastle.jcajce.provider.symmetric.SM4$AlgParamGen.
This is a backport of JDK-8256660: Disable DTLS 1.0.
Although DTLS has nothing to do with TLCP, it would be better to align the codes with the OpenJDK's.
The substitution of org.bouncycastle.jcajce.provider.symmetric.SM4$AlgParams.
This is backport of JDK-8277307: Pre shared key sent under both session_ticket and pre_shared_key extensions.
java.lang.IllegalAccessError:
class com.tencent.kona.crypto.provider.GaloisCounterMode$GCMEngine (in unnamed module @0x2d58d9ed)
cannot access class sun.nio.ch.DirectBuffer (in module java.base)
because module java.base does not export sun.nio.ch to unnamed module @0x2d58d9ed
at com.tencent.kona.crypto.provider.GaloisCounterMode$GCMEngine.overlapDetection(GaloisCounterMode.java:929)
at com.tencent.kona.crypto.provider.GaloisCounterMode$GCMEncrypt.doFinal(GaloisCounterMode.java:1318)
at com.tencent.kona.crypto.provider.GaloisCounterMode.engineDoFinal(GaloisCounterMode.java:452)
at java.base/javax.crypto.Cipher.doFinal(Cipher.java:2500)
at com.tencent.kona.sun.security.ssl.TLCPCipher$TLCPGcmWriteCipherGenerator$GcmWriteCipher.encrypt(TLCPCipher.java:522)
at com.tencent.kona.sun.security.ssl.OutputRecord.t10Encrypt(OutputRecord.java:440)
at com.tencent.kona.sun.security.ssl.OutputRecord.encrypt(OutputRecord.java:344)
at com.tencent.kona.sun.security.ssl.SSLEngineOutputRecord$HandshakeFragment.acquireCiphertext(SSLEngineOutputRecord.java:535)
at com.tencent.kona.sun.security.ssl.SSLEngineOutputRecord.acquireCiphertext(SSLEngineOutputRecord.java:353)
at com.tencent.kona.sun.security.ssl.SSLEngineOutputRecord.encode(SSLEngineOutputRecord.java:205)
at com.tencent.kona.sun.security.ssl.SSLEngineOutputRecord.encode(SSLEngineOutputRecord.java:187)
at com.tencent.kona.sun.security.ssl.SSLEngineImpl.encode(SSLEngineImpl.java:304)
at com.tencent.kona.sun.security.ssl.SSLEngineImpl.writeRecord(SSLEngineImpl.java:246)
at com.tencent.kona.sun.security.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:146)
at com.tencent.kona.sun.security.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:123)
at java.base/javax.net.ssl.SSLEngine.wrap(SSLEngine.java:564)
This is a backport of JDK-8296142: CertAttrSet::(getName|getElements|delete) are mostly useless.
This is a backport of JDK-8296736: Some PKCS9Attribute can be created but cannot be encoded.
This a backport of JDK-8286908: ECDSA signature should not return parameters.
This is a backport of JDK-8296442: EncryptedPrivateKeyInfo can be created with an uninitialized AlgorithmParameters.
This is a substitution of org.bouncycastle.jcajce.provider.symmetric.SM4$ECB
The substitution of org.bouncycastle.jcajce.provider.symmetric.SM4$KeyGen.
This is a backport of JDK-8296612: CertAttrSet is useless.
This is a backport of JDK-8296742: Illegal X509 Extension should not be created.
This is backport of JDK-8289572: InputStream wrapping with BufferedInputStream is redundant in HttpTimestamper.
This is a backport of JDK-8295011: EC point multiplication improvement for secp256r1.
This is a backport of JDK-8289274: Cleanup unnecessary null comparison before instanceof check in security modules.
Although #25 cleaned up the classes from OpenJDK, the classes for TLCP only should also be cleaned up.
It would be better to use GitHub actions for testing on PR.
According to Maven Central requirements, a POM would contain name, description, URL and license.
The version is changed to 1.0.2.
BouncyCastle just released 1.72.
This version resolves a SM2 encryption issue, which may lead to infinite loop.
The fix is bcgit/bc-java@58940b9
Update the version to 1.0.3.
Update version to 1.0.4-SNAPSHOT for developing the next release, exactly 1.0.4.
./gradlew.sh or ./gradlw.bat need gradle-wrapper.jar to download gradle and run tasks.
This is a backport of JDK-8284415: Collapse identical catch branches in security libs.
This is backport of JDK-8296072: CertAttrSet::encode and DerEncoder::derEncode should write into DerOutputStream.
The artifacts are already uploaded to the Maven Central repository. It would be better to add a new section Installation for each README.
This is a backport of JDK-8296741: Illegal X400Address and EDIPartyName should not be created.
This is a backport of JDK-8296901: Do not create unsigned certificate and CRL.
This is a substitution of org.bouncycastle.jcajce.provider.asymmetric.ec.GMCipherSpi.
This is a backport of JDK-8294848: Unnecessary SSLCipher dispose implementations.
Sign the jars with Oracle-issued JCE code signing certificate.
Update READMEs for changing the versions to 1.0.4.
The SM4 transformations on ECB mode are missing.
CONTRIBUTING.md adds a section on reporting security vulnerabilities.
This is a backport JDK-8293886: The abstract keyword can be removed in AESCipher.
This is a backport of JDK-8295953: Use enhanced-for cycle instead of Enumeration in sun.security.
Update the version to 1.0.4.
This is a backport of JDK-8288508: Enhance ECDSA usage.
This JBS is a security issue, though it has no CVE.
This is a backport of JDK-8283800: Simplify String.indexOf/lastIndexOf calls.
Most of build logics are duplicated in the sub-projects. It would be better to put the same build logics in a single scripts, and then the sub-projects just share them.
This is a backport of JDK-8296900: CertificateValidity fields are not optional.
This is a backport of JDK-8294987: Streamline DerOutputStream write.
This is a backport of JDK-8283525: http://tools.ietf.org/html/* URLs return 404
It would be better to deploy the artifacts to the Maven Central repository.
It would be better to set up a security policy, exactly SECURITY.md, for clarifying how to report the possible security vulnerabilities.
This is a backport of JDK-8294731: Improve multiplicative inverse for secp256r1 implementation
This is a backport of JDK-8296143: CertAttrSet's set/get mechanism is not type-safe.
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.