JDK-8255410 : Add ChaCha20 and Poly1305 support to SunPKCS11 provider
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.crypto:pkcs11
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2020-10-26
  • Updated: 2022-07-30
  • Resolved: 2021-04-29
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 17
11.0.15-oracleFixed 17 b21Fixed
Related Reports
CSR :  
JDK-8265008 - Add ChaCha20 and Poly1305 support to SunPKCS11 provider
Relates :  
JDK-8288985 - P11TlsKeyMaterialGenerator should work with ChaCha20-Poly1305
Relates :  
JDK-8244154 - Update SunPKCS11 provider with PKCS11 v3.0 header files
Sub Tasks
JDK-8265006 :  
Update SunPKCS11 provider guide with ChaCha20-Poly1305 cipher and ChaCha20 key gen - Resolved
JDK-8275737 :  
Release Note: SunPKCS11 Provider Supports ChaCha20-Poly1305 Cipher and ChaCha20 KeyGenerator if Supported by PKCS11 Library - Closed
Description
NSS does not have support for these algorithm yet. We should consider this if there are more PKCS11 libraries added support since they are already supported by default jdk provider(s).
Comments
Fix request [11u] I backport this for parity with 11.0.15-oracle. An enhancement, but I think we should stay on par here. I had to do a row of adaptions, review needed. For the CSR see backport by Oracle. Test passes. SAP nightly testing passed for a few times now.
08-02-2022
A pull request was submitted for review. URL: https://git.openjdk.java.net/jdk11u-dev/pull/805 Date: 2022-02-03 19:33:31 +0000
03-02-2022
Changeset: 5d8c1cc8 Author: Valerie Peng <valeriep@openjdk.org> Date: 2021-04-29 21:02:41 +0000 URL: https://git.openjdk.java.net/jdk/commit/5d8c1cc8a05e0d9aedd6d54b8147d374c2290024
29-04-2021
NSS 3.57 supports ChaCha20 and Poly1305 mechanisms as below: Mechanism CKM_CHACHA20_KEY_GEN: ulMinKeySize: 32 ulMaxKeySize: 32 flags: 32768 = CKF_GENERATE Mechanism CKM_CHACHA20_POLY1305: ulMinKeySize: 32 ulMaxKeySize: 32 flags: 774 = CKF_MESSAGE_ENCRYPT | CKF_MESSAGE_DECRYPT | CKF_ENCRYPT | CKF_DECRYPT
24-03-2021