CVE-2022-21449: Psychic Signatures in Java
The long-running BBC sci-fi show Doctor Who has a recurring plot device where the Doctor manages to get out of trouble by showing an identity card which is actually completely blank. Of course, this being Doctor Who, the card is really made out of a special “psychic paper“, which causes the person looking at it to see whatever the Doctor wants them to see: a security pass, a warrant, or whatever.
KeyStore Explorer
KeyStore Explorer KeyStore Explorer is an open source GUI replacement for the Java command-line utilities keytool and jarsigner. KeyStore Explorer presents their functionality, and more, via an intuitive graphical user interface. Download Simplified Development of Secure Java A software developer should be able to focus on the problem at hand without struggling with obtuse command-line tools. With
Linux*/Java* スタック上におけるインテル® AES-NI パフォーマンス・テスト | iSUS
この記事は、インテル® ソフトウェア・ネットワークに掲載されている「Intel® AES-NI Performance Testing on Linux/Java Stack」(http://software.intel.com/en-us/articles/intel-aes-ni-performance-testing-on-linuxjava-stack/) の日本語参考訳です。 目次 1. 要旨 2. はじめに 2.1. 目標 2.2. インテル® AES-NI の機能 2.3. 目的 2.4. 対象者 2.5. 用語 2.6. 謝辞 3. システムのセットアップと設定 3.1. コンポーネント 3.2. テストシステムでインテル® AES-NI を有効/無効にする 3.3. ローカルホストからインテル® AES-NI ステータスを確認する 3.4. ソフトウェアのセットアップ 3
Java での AES-NI の効力とか性能とか - ..たれろぐ..
『Java って AES-NI 効いてるの？』って17歳女子高生の素朴な疑問から。 結果： 128KB のバイト配列を食わせた結果 AES-NI あり 663,478 ns AES-NI なし 1,880,994 ns 2.8 倍ぐらいはやい。 OpenSSLを使ったベンチ のことを思うと振るわないけど効果はあるのね。 環境 Java8 1.8.0u45 64bit java version "1.8.0_45" Java(TM) SE Runtime Environment (build 1.8.0_45-b14) Java HotSpot(TM) 64-Bit Server VM (build 25.45-b02, mixed mode) CPU Intel i7 4600U ARK | Intel® Core™ i7-4600U Processor (4M Cache, up to
AES-NI intrinsics enabled by default?
Oracle has this to say about Java 8 with regards to AES-NI: Hardware intrinsics were added to use Advanced Encryption Standard (AES). The UseAES and UseAESIntrinsics flags are available to enable the hardware-based AES intrinsics for Intel hardware. The hardware must be 2010 or newer Westmere hardware. For example, to enable hardware AES, use the following flags: -XX:+UseAES -XX:+UseAESIntrinsics
Case Studies and Lessons Learned from SSL/TLS Certificate Verification Vulnerabilities (JavaOne2015 Edition)
Recently we’ve seen many vulnerabilities related to improper certificate validation. Those vulnerabilities come from developers’ ignorance or misunderstanding of basic knowledge of certificate validation or insufficient testing of validation code. This presentation starts with the basics of the certificate validation process, surveys several vulnerabilities in the real world, and concludes with le
TestSSLServer
New (April 28th, 2017): Some existing servers seem to require the optional "supported point format" extension in the ClientHello in order to enable EC-based cipher suites. TestSSLServer now sends that extension. Also, a debug log feature has been added (hex dump of all bytes in both directions, for all connections). New (February 16th, 2017): A bug as been fixed: TestSSLServer now sends the "signa
TLS settings
Back to documentation home Professional and Community Edition Professional and Community Edition Getting started System requirements Step 1: Download and install Step 2: Intercepting HTTP traffic Step 3: Modifying requests Step 4: Setting the target scope Step 5: Reissuing requests Step 6: Running your first scan [Pro only] Step 7: Generating a report [Pro only] Step 8: What next? Testing workflow
JSSE Reference Guide for Java SE
Data that travels across a network can easily be accessed by someone who is not the intended recipient. When the data includes private information, such as passwords and credit card numbers, steps must be taken to make the data unintelligible to unauthorized parties. It is also important to ensure the data has not been modified, either intentionally or unintentionally, during transport. The Secure
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
https://java.com/en/jre-jdk-cryptoroadmap.html
Ben Smyth :: TLS 1.3 for engineers: An exploration of the TLS 1.3 specification and OpenJDK's Java implementation
GitHub - wildfly-security/wildfly-openssl: Generic OpenSSL bindings for Java
GitHub - google/conscrypt: Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.
IBM Developer
GitHub - tls-attacker/TLS-Attacker: TLS-Attacker is a Java-based framework for analyzing TLS libraries. It can be used to manually test TLS clients and servers or as as a software library for more advanced tools.
AES acceleration for Java
Using the Java Cryptographic Extensions | OWASP Foundation
What means "javax.net.ssl.SSLHandshakeException: server certificate change is restrictedduring renegotiation" and how to prevent it?
jdk8u/jdk8u/jdk: 8b0fbfddc048
https://blogs.oracle.com/java/post/entry/diagnosing_tls_ssl_and_https