Tls injection mechanism by sergejskozlovics · Pull Request #1517 · bcgit/bc-java

Commits on Oct 25, 2023

Added multiples classes implementing the TLS injection mechanism in BC
sergejskozlovics
committed
Added code that makes injected KEMs visible to TLS
sergejskozlovics
committed
Re-implemented NamedGroupInfo to support injected KEMs
sergejskozlovics
committed
Re-implemented SignatureSchemeInfo to support injected Sig Algs
sergejskozlovics
committed
added injected KEMs to the TLS supported groups extension
sergejskozlovics
committed
adding injected KEMs and signature algorithms to the list of supported by TLS
sergejskozlovics
committed
using KEM as a TlsAgreement
sergejskozlovics
committed
adding injected KEMs and signature algorithms to JcaTlsCrypto
sergejskozlovics
committed
Added code that makes signature algorithms (injected via InjectionPoint) visible to TLS
sergejskozlovics
committed
Adding support for injected algorithms (via InjectionPoint) to the BC PQC provider. PQC algorithms now can be loaded without reflection (useful when compiling with GraalVM native-image).
sergejskozlovics
committed

Commits on Oct 27, 2023

Commits on Nov 23, 2023

More secure pop() method for InjectionPoint. Better logic for inserting KEMs before others in InjectableKEMs.
sergejskozlovics
committed

Commits on Apr 14, 2024

Merge remote-tracking branch 'upstream/main' into tls-injection2
sergejskozlovics
committed

Commits on Apr 19, 2024

Commits on Jun 3, 2024

renamed variables "*EncodedKey" to "*ByteKey"; add "RSASSA-PSS" as a fallback algorithm for the BC adapter (since <hash-name>WITHRSAANDMGF1 sometimes is not found)
sergejskozlovics
committed

Commits on Jun 14, 2024

Commits on Jun 18, 2024

adding the BC provider in InjectionPoint.push
sergejskozlovics
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Tls injection mechanism#1517

Tls injection mechanism#1517
sergejskozlovics wants to merge 24 commits intobcgit:mainfrom
LUMII-Syslab:tls-injection2

Commits on Oct 25, 2023

Added multiples classes implementing the TLS injection mechanism in BC

Added code that makes injected KEMs visible to TLS

Re-implemented NamedGroupInfo to support injected KEMs

Re-implemented SignatureSchemeInfo to support injected Sig Algs

added injected KEMs to the TLS supported groups extension

adding injected KEMs and signature algorithms to the list of supported by TLS

using KEM as a TlsAgreement

adding injected KEMs and signature algorithms to JcaTlsCrypto

Added code that makes signature algorithms (injected via InjectionPoint) visible to TLS

Adding support for injected algorithms (via InjectionPoint) to the BC PQC provider. PQC algorithms now can be loaded without reflection (useful when compiling with GraalVM native-image).

Commits on Oct 27, 2023

moved TLS injection mechanism from BC tls folder to core

some changes in imports

changed arg ordering

Commits on Nov 23, 2023

More secure pop() method for InjectionPoint. Better logic for inserting KEMs before others in InjectableKEMs.

Commits on Apr 14, 2024

Merge remote-tracking branch 'upstream/main' into tls-injection2

Commits on Apr 19, 2024

moved the main TLS Injection Mechanism out from the core package, leaving only Asn1Bridge and Asn1BridgeForInjectedSigAlgs there; no dependency on the tls package

refactored TLS Injection Mechanism; moved it to the tls package

fixed comments

Removed UniversalKeyPairGenerator, since it is not used by the TLS Injection Mechanism. Besides, UniversalKeyPairGenerator is difficult to implement.

Commits on Jun 3, 2024

renamed variables "EncodedKey" to "ByteKey"; add "RSASSA-PSS" as a fallback algorithm for the BC adapter (since <hash-name>WITHRSAANDMGF1 sometimes is not found)

Commits on Jun 14, 2024

added .clone() for the shared key, since BC may alter it

added isEmpty() to InjectionPoint

fixed a bug when KEM keyGen() was unnecessarily invoked at the server side

Commits on Jun 18, 2024

adding the BC provider in InjectionPoint.push