tencent / tencentkonasmsuite Goto Github PK

./gradlew.sh or ./gradlw.bat need gradle-wrapper.jar to download gradle and run tasks.

Update the version to 1.0.3.

This is a backport of JDK-8296442: EncryptedPrivateKeyInfo can be created with an uninitialized AlgorithmParameters.

Sign the jars with Oracle-issued JCE code signing certificate.

The SM4 transformations on ECB mode are missing.
CONTRIBUTING.md adds a section on reporting security vulnerabilities.

The artifacts are already uploaded to the Maven Central repository. It would be better to add a new section Installation for each README.

This is a backport of JDK-8294848: Unnecessary SSLCipher dispose implementations.

This is backport of JDK-8291509: Minor cleanup could be done in sun.security.

This is a backport of JDK-8294997: Improve ECC math operations.

The substitution of org.bouncycastle.jcajce.provider.symmetric.SM4$AlgParams.

This is a backport of JDK-8296736: Some PKCS9Attribute can be created but cannot be encoded.

This is a backport of JDK-8284415: Collapse identical catch branches in security libs.

This is a backport of JDK-8294987: Streamline DerOutputStream write.

According to Maven Central requirements, a POM would contain name, description, URL and license.

[1] https://central.sonatype.org/publish/requirements

BouncyCastle just released 1.72.
This version resolves a SM2 encryption issue, which may lead to infinite loop.
The fix is bcgit/bc-java@58940b9

This is a backport of JDK-8296900: CertificateValidity fields are not optional.

This is a backport of JDK-8295953: Use enhanced-for cycle instead of Enumeration in sun.security.

This is a backport of JDK-8296142: CertAttrSet::(getName|getElements|delete) are mostly useless.

This is a backport of JDK-8283800: Simplify String.indexOf/lastIndexOf calls.

This is a backport of JDK-8289274: Cleanup unnecessary null comparison before instanceof check in security modules.

This is a substitution of org.bouncycastle.jcajce.provider.symmetric.SM4$AlgParamGen.

Update version to 1.0.4-SNAPSHOT for developing the next release, exactly 1.0.4.

This is a backport JDK-8293886: The abstract keyword can be removed in AESCipher.

This is a substitution of org.bouncycastle.jcajce.provider.asymmetric.ec.GMCipherSpi.

It would be better to deploy the artifacts to the Maven Central repository.

This is backport of JDK-8277307: Pre shared key sent under both session_ticket and pre_shared_key extensions.

This a backport of JDK-8286908: ECDSA signature should not return parameters.

This is a backport of JDK-8295011: EC point multiplication improvement for secp256r1.

This is a backport of JDK-8283525: http://tools.ietf.org/html/* URLs return 404

This is a backport of JDK-8296143: CertAttrSet's set/get mechanism is not type-safe.

Most of build logics are duplicated in the sub-projects. It would be better to put the same build logics in a single scripts, and then the sub-projects just share them.

Although #25 cleaned up the classes from OpenJDK, the classes for TLCP only should also be cleaned up.

It would be better to use GitHub actions for testing on PR.

The version is changed to 1.0.2.

The substitution of org.bouncycastle.jcajce.provider.symmetric.SM4$KeyGen.

This is a backport of JDK-8288508: Enhance ECDSA usage.
This JBS is a security issue, though it has no CVE.

This is backport of JDK-8296072: CertAttrSet::encode and DerEncoder::derEncode should write into DerOutputStream.

This is a backport of JDK-8256660: Disable DTLS 1.0.

Although DTLS has nothing to do with TLCP, it would be better to align the codes with the OpenJDK's.

This is a backport of JDK-8296741: Illegal X400Address and EDIPartyName should not be created.

Update the version to 1.0.4.

It would be better to set up a security policy, exactly SECURITY.md, for clarifying how to report the possible security vulnerabilities.

Update READMEs for changing the versions to 1.0.4.

This is a backport of JDK-8296612: CertAttrSet is useless.

This is a backport of JDK-8296901: Do not create unsigned certificate and CRL.

This is backport of JDK-8289572: InputStream wrapping with BufferedInputStream is redundant in HttpTimestamper.

This is a substitution of org.bouncycastle.jcajce.provider.symmetric.SM4$ECB

This is a backport of JDK-8296742: Illegal X509 Extension should not be created.

This is a backport of JDK-8294731: Improve multiplicative inverse for secp256r1 implementation