mirror of
https://github.com/openjdk/jdk.git
synced 2025-08-28 15:24:43 +02:00
8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com> Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com> Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com> Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com> Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com> Co-authored-by: John Jiang <sha.jiang@oracle.com> Co-authored-by: Rajan Halade <rajan.halade@oracle.com> Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com> Co-authored-by: Valerie Peng <valerie.peng@oracle.com> Co-authored-by: Weijun Wang <weijun.wang@oracle.com> Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
This commit is contained in:
Xue-Lei Andrew Fan
parent
c7c819cd8b
commit
87c6761704
262 changed files with 44368 additions and 32552 deletions
324
src/java.base/share/classes/sun/security/ssl/KeyUpdate.java
Normal file
324
src/java.base/share/classes/sun/security/ssl/KeyUpdate.java
Normal file
|
|
@ -0,0 +1,324 @@
|
|||
/*
|
||||
* Copyright (c) 2018, Oracle and/or its affiliates. All rights reserved.
|
||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
||||
*
|
||||
* This code is free software; you can redistribute it and/or modify it
|
||||
* under the terms of the GNU General Public License version 2 only, as
|
||||
* published by the Free Software Foundation. Oracle designates this
|
||||
* particular file as subject to the "Classpath" exception as provided
|
||||
* by Oracle in the LICENSE file that accompanied this code.
|
||||
*
|
||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||||
* version 2 for more details (a copy is included in the LICENSE file that
|
||||
* accompanied this code).
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License version
|
||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
*
|
||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
||||
* or visit www.oracle.com if you need additional information or have any
|
||||
* questions.
|
||||
*/
|
||||
|
||||
package sun.security.ssl;
|
||||
|
||||
import java.io.IOException;
|
||||
import java.nio.ByteBuffer;
|
||||
import java.security.GeneralSecurityException;
|
||||
import java.text.MessageFormat;
|
||||
import java.util.Locale;
|
||||
|
||||
import sun.security.ssl.SSLHandshake.HandshakeMessage;
|
||||
import sun.security.ssl.SSLCipher.SSLReadCipher;
|
||||
import sun.security.ssl.SSLCipher.SSLWriteCipher;
|
||||
|
||||
import javax.crypto.SecretKey;
|
||||
import javax.crypto.spec.IvParameterSpec;
|
||||
|
||||
/**
|
||||
* Pack of the KeyUpdate handshake message.
|
||||
*/
|
||||
final class KeyUpdate {
|
||||
static final SSLProducer kickstartProducer =
|
||||
new KeyUpdateKickstartProducer();
|
||||
|
||||
static final SSLConsumer handshakeConsumer =
|
||||
new KeyUpdateConsumer();
|
||||
static final HandshakeProducer handshakeProducer =
|
||||
new KeyUpdateProducer();
|
||||
|
||||
/**
|
||||
* The KeyUpdate handshake message.
|
||||
*
|
||||
* The KeyUpdate handshake message is used to indicate that the sender is
|
||||
* updating its sending cryptographic keys.
|
||||
*
|
||||
* enum {
|
||||
* update_not_requested(0), update_requested(1), (255)
|
||||
* } KeyUpdateRequest;
|
||||
*
|
||||
* struct {
|
||||
* KeyUpdateRequest request_update;
|
||||
* } KeyUpdate;
|
||||
*/
|
||||
static final class KeyUpdateMessage extends HandshakeMessage {
|
||||
private final KeyUpdateRequest status;
|
||||
|
||||
KeyUpdateMessage(PostHandshakeContext context,
|
||||
KeyUpdateRequest status) {
|
||||
super(context);
|
||||
this.status = status;
|
||||
}
|
||||
|
||||
KeyUpdateMessage(PostHandshakeContext context,
|
||||
ByteBuffer m) throws IOException {
|
||||
super(context);
|
||||
|
||||
if (m.remaining() != 1) {
|
||||
context.conContext.fatal(Alert.ILLEGAL_PARAMETER,
|
||||
"KeyUpdate has an unexpected length of "+
|
||||
m.remaining());
|
||||
}
|
||||
|
||||
byte request = m.get();
|
||||
this.status = KeyUpdateRequest.valueOf(request);
|
||||
if (status == null) {
|
||||
context.conContext.fatal(Alert.ILLEGAL_PARAMETER,
|
||||
"Invalid KeyUpdate message value: " +
|
||||
KeyUpdateRequest.nameOf(request));
|
||||
}
|
||||
}
|
||||
|
||||
@Override
|
||||
public SSLHandshake handshakeType() {
|
||||
return SSLHandshake.KEY_UPDATE;
|
||||
}
|
||||
|
||||
@Override
|
||||
public int messageLength() {
|
||||
// one byte enum
|
||||
return 1;
|
||||
}
|
||||
|
||||
@Override
|
||||
public void send(HandshakeOutStream s) throws IOException {
|
||||
s.putInt8(status.id);
|
||||
}
|
||||
|
||||
@Override
|
||||
public String toString() {
|
||||
MessageFormat messageFormat = new MessageFormat(
|
||||
"\"KeyUpdate\": '{'\n" +
|
||||
" \"request_update\": {0}\n" +
|
||||
"'}'",
|
||||
Locale.ENGLISH);
|
||||
|
||||
Object[] messageFields = {
|
||||
status.name
|
||||
};
|
||||
|
||||
return messageFormat.format(messageFields);
|
||||
}
|
||||
}
|
||||
|
||||
enum KeyUpdateRequest {
|
||||
NOTREQUESTED ((byte)0, "update_not_requested"),
|
||||
REQUESTED ((byte)1, "update_requested");
|
||||
|
||||
final byte id;
|
||||
final String name;
|
||||
|
||||
private KeyUpdateRequest(byte id, String name) {
|
||||
this.id = id;
|
||||
this.name = name;
|
||||
}
|
||||
|
||||
static KeyUpdateRequest valueOf(byte id) {
|
||||
for (KeyUpdateRequest kur : KeyUpdateRequest.values()) {
|
||||
if (kur.id == id) {
|
||||
return kur;
|
||||
}
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
static String nameOf(byte id) {
|
||||
for (KeyUpdateRequest kur : KeyUpdateRequest.values()) {
|
||||
if (kur.id == id) {
|
||||
return kur.name;
|
||||
}
|
||||
}
|
||||
|
||||
return "<UNKNOWN KeyUpdateRequest TYPE: " + (id & 0x0FF) + ">";
|
||||
}
|
||||
}
|
||||
|
||||
private static final
|
||||
class KeyUpdateKickstartProducer implements SSLProducer {
|
||||
// Prevent instantiation of this class.
|
||||
private KeyUpdateKickstartProducer() {
|
||||
// blank
|
||||
}
|
||||
|
||||
// Produce kickstart handshake message.
|
||||
@Override
|
||||
public byte[] produce(ConnectionContext context) throws IOException {
|
||||
PostHandshakeContext hc = (PostHandshakeContext)context;
|
||||
return handshakeProducer.produce(context,
|
||||
new KeyUpdateMessage(hc, KeyUpdateRequest.REQUESTED));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* The "KeyUpdate" handshake message consumer.
|
||||
*/
|
||||
private static final class KeyUpdateConsumer implements SSLConsumer {
|
||||
// Prevent instantiation of this class.
|
||||
private KeyUpdateConsumer() {
|
||||
// blank
|
||||
}
|
||||
|
||||
@Override
|
||||
public void consume(ConnectionContext context,
|
||||
ByteBuffer message) throws IOException {
|
||||
// The consuming happens in client side only.
|
||||
PostHandshakeContext hc = (PostHandshakeContext)context;
|
||||
KeyUpdateMessage km = new KeyUpdateMessage(hc, message);
|
||||
if (SSLLogger.isOn && SSLLogger.isOn("ssl,handshake")) {
|
||||
SSLLogger.fine(
|
||||
"Consuming KeyUpdate post-handshake message", km);
|
||||
}
|
||||
|
||||
// Update read key and IV.
|
||||
SSLTrafficKeyDerivation kdg =
|
||||
SSLTrafficKeyDerivation.valueOf(hc.conContext.protocolVersion);
|
||||
if (kdg == null) {
|
||||
// unlikely
|
||||
hc.conContext.fatal(Alert.INTERNAL_ERROR,
|
||||
"Not supported key derivation: " +
|
||||
hc.conContext.protocolVersion);
|
||||
return;
|
||||
}
|
||||
|
||||
SSLKeyDerivation skd = kdg.createKeyDerivation(hc,
|
||||
hc.conContext.inputRecord.readCipher.baseSecret);
|
||||
if (skd == null) {
|
||||
// unlikely
|
||||
hc.conContext.fatal(Alert.INTERNAL_ERROR, "no key derivation");
|
||||
return;
|
||||
}
|
||||
|
||||
SecretKey nplus1 = skd.deriveKey("TlsUpdateNplus1", null);
|
||||
SSLKeyDerivation kd = kdg.createKeyDerivation(hc, nplus1);
|
||||
SecretKey key = kd.deriveKey("TlsKey", null);
|
||||
IvParameterSpec ivSpec = new IvParameterSpec(
|
||||
kd.deriveKey("TlsIv", null).getEncoded());
|
||||
try {
|
||||
SSLReadCipher rc =
|
||||
hc.negotiatedCipherSuite.bulkCipher.createReadCipher(
|
||||
Authenticator.valueOf(hc.conContext.protocolVersion),
|
||||
hc.conContext.protocolVersion, key, ivSpec,
|
||||
hc.sslContext.getSecureRandom());
|
||||
hc.conContext.inputRecord.changeReadCiphers(rc);
|
||||
hc.conContext.inputRecord.readCipher.baseSecret = nplus1;
|
||||
if (SSLLogger.isOn && SSLLogger.isOn("ssl")) {
|
||||
SSLLogger.fine("KeyUpdate: read key updated");
|
||||
}
|
||||
} catch (GeneralSecurityException gse) {
|
||||
hc.conContext.fatal(Alert.INTERNAL_ERROR,
|
||||
"Failure to derive read secrets", gse);
|
||||
return;
|
||||
}
|
||||
|
||||
if (km.status == KeyUpdateRequest.REQUESTED) {
|
||||
// Update the write key and IV.
|
||||
handshakeProducer.produce(hc,
|
||||
new KeyUpdateMessage(hc, KeyUpdateRequest.NOTREQUESTED));
|
||||
return;
|
||||
}
|
||||
|
||||
// clean handshake context
|
||||
hc.conContext.finishPostHandshake();
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* The "KeyUpdate" handshake message producer.
|
||||
*/
|
||||
private static final class KeyUpdateProducer implements HandshakeProducer {
|
||||
// Prevent instantiation of this class.
|
||||
private KeyUpdateProducer() {
|
||||
// blank
|
||||
}
|
||||
|
||||
@Override
|
||||
public byte[] produce(ConnectionContext context,
|
||||
HandshakeMessage message) throws IOException {
|
||||
// The producing happens in server side only.
|
||||
PostHandshakeContext hc = (PostHandshakeContext)context;
|
||||
KeyUpdateMessage km = (KeyUpdateMessage)message;
|
||||
if (SSLLogger.isOn && SSLLogger.isOn("ssl,handshake")) {
|
||||
SSLLogger.fine(
|
||||
"Produced KeyUpdate post-handshake message", km);
|
||||
}
|
||||
|
||||
// Update the write key and IV.
|
||||
SSLTrafficKeyDerivation kdg =
|
||||
SSLTrafficKeyDerivation.valueOf(hc.conContext.protocolVersion);
|
||||
if (kdg == null) {
|
||||
// unlikely
|
||||
hc.conContext.fatal(Alert.INTERNAL_ERROR,
|
||||
"Not supported key derivation: " +
|
||||
hc.conContext.protocolVersion);
|
||||
return null;
|
||||
}
|
||||
|
||||
SSLKeyDerivation skd = kdg.createKeyDerivation(hc,
|
||||
hc.conContext.outputRecord.writeCipher.baseSecret);
|
||||
if (skd == null) {
|
||||
// unlikely
|
||||
hc.conContext.fatal(Alert.INTERNAL_ERROR, "no key derivation");
|
||||
return null;
|
||||
}
|
||||
|
||||
SecretKey nplus1 = skd.deriveKey("TlsUpdateNplus1", null);
|
||||
SSLKeyDerivation kd = kdg.createKeyDerivation(hc, nplus1);
|
||||
SecretKey key = kd.deriveKey("TlsKey", null);
|
||||
IvParameterSpec ivSpec = new IvParameterSpec(
|
||||
kd.deriveKey("TlsIv", null).getEncoded());
|
||||
|
||||
SSLWriteCipher wc;
|
||||
try {
|
||||
wc = hc.negotiatedCipherSuite.bulkCipher.createWriteCipher(
|
||||
Authenticator.valueOf(hc.conContext.protocolVersion),
|
||||
hc.conContext.protocolVersion, key, ivSpec,
|
||||
hc.sslContext.getSecureRandom());
|
||||
} catch (GeneralSecurityException gse) {
|
||||
hc.conContext.fatal(Alert.INTERNAL_ERROR,
|
||||
"Failure to derive write secrets", gse);
|
||||
return null;
|
||||
}
|
||||
|
||||
// Output the handshake message.
|
||||
km.write(hc.handshakeOutput);
|
||||
hc.handshakeOutput.flush();
|
||||
|
||||
// change write cipher
|
||||
hc.conContext.outputRecord.changeWriteCiphers(wc, false);
|
||||
hc.conContext.outputRecord.writeCipher.baseSecret = nplus1;
|
||||
if (SSLLogger.isOn && SSLLogger.isOn("ssl")) {
|
||||
SSLLogger.fine("KeyUpdate: write key updated");
|
||||
}
|
||||
|
||||
// clean handshake context
|
||||
hc.conContext.finishPostHandshake();
|
||||
|
||||
// The handshake message has been delivered.
|
||||
return null;
|
||||
}
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue