Google Git
Sign in
android / platform / external / conscrypt / 405ba59e2
commit405ba59e239d0272a834f5401c7aec1816b3cacd[log] [tgz]
authorJürg Wullschleger <52660988+juergw@users.noreply.github.com>Mon Mar 31 13:23:06 2025 +0200
committerGitHub <noreply@github.com>Mon Mar 31 12:23:06 2025 +0100
treec859fac4786587c1646e3748b6d9ce10b02c7790
parentfa8c0d177cd609b39a96bbf5d8aafd11f4c063db [diff]
Use ByteArrayOutputStream to buffer data in Conscrypt's AEAD Ciphers. (#1318)

* Use ByteArrayOutputStream to buffer data in Conscrypt's AEAD Ciphers.

Currently, the input data is buffered by a byte array, which size
is increased when there is not enough space. Getting all edge-cases
right is difficult. It is better to use ByteArrayOutputStream for this.
(We create a subclass of it to avoid copying the whole array.)

Also, we remove the global variable lastGlobalMessageSize, while keeping
the optimizations it achived:
- optimize encryptions of data of the same size.
- avoid keeping a large buffer, if it subsequent encryptions
  use short message.

We avoid some unnecessary memory allocations on initialization.
1 file changed
tree: c859fac4786587c1646e3748b6d9ce10b02c7790
  1. .github/
  2. android/
  3. android-stub/
  4. api-doclet/
  5. benchmark-android/
  6. benchmark-base/
  7. benchmark-graphs/
  8. benchmark-jmh/
  9. common/
  10. constants/
  11. gradle/
  12. libcore-stub/
  13. licenses/
  14. openjdk/
  15. openjdk-uber/
  16. platform/
  17. release/
  18. scripts/
  19. testing/
  20. .clang-format
  21. .gitignore
  22. build.gradle
  23. BUILDING.md
  24. CAPABILITIES.md
  25. CONTRIBUTING.md
  26. CPPLINT.cfg
  27. gradle.properties
  28. gradlew
  29. gradlew.bat
  30. IMPLEMENTATION_NOTES.md
  31. LICENSE
  32. MODULE_LICENSE_APACHE2
  33. NOTICE
  34. PREUPLOAD.cfg
  35. README.md
  36. settings.gradle
  37. test_logging.properties
README.md

Conscrypt - A Java Security Provider

Conscrypt is a Java Security Provider (JSP) that implements parts of the Java Cryptography Extension (JCE) and Java Secure Socket Extension (JSSE). It uses BoringSSL to provide cryptographic primitives and Transport Layer Security (TLS) for Java applications on Android and OpenJDK. See the capabilities documentation for detailed information on what is provided.

The core SSL engine has borrowed liberally from the Netty project and their work on netty-tcnative, giving Conscrypt similar performance.

Download

Conscrypt supports Java 8 or later on OpenJDK and KitKat (API Level 19) or later on Android. The build artifacts are available on Maven Central.

Download JARs

You can download the JARs directly from the Maven repositories.

OpenJDK (i.e. non-Android)

Native Classifiers

The OpenJDK artifacts are platform-dependent since each embeds a native library for a particular platform. We publish artifacts to Maven Central for the following platforms:

ClassifierOSArchitecture
linux-x86_64Linuxx86_64 (64-bit)
osx-x86_64Macx86_64 (64-bit)
windows-x86Windowsx86 (32-bit)
windows-x86_64Windowsx86_64 (64-bit)

Maven

Use the os-maven-plugin to add the dependency:

<build>
  <extensions>
    <extension>
      <groupId>kr.motd.maven</groupId>
      <artifactId>os-maven-plugin</artifactId>
      <version>1.4.1.Final</version>
    </extension>
  </extensions>
</build>

<dependency>
  <groupId>org.conscrypt</groupId>
  <artifactId>conscrypt-openjdk</artifactId>
  <version>2.5.2</version>
  <classifier>${os.detected.classifier}</classifier>
</dependency>

Gradle

Use the osdetector-gradle-plugin (which is a wrapper around the os-maven-plugin) to add the dependency:

buildscript {
  repositories {
    mavenCentral()
  }
  dependencies {
    classpath 'com.google.gradle:osdetector-gradle-plugin:1.4.0'
  }
}

// Use the osdetector-gradle-plugin
apply plugin: "com.google.osdetector"

dependencies {
  compile 'org.conscrypt:conscrypt-openjdk:2.5.2:' + osdetector.classifier
}

Uber JAR

For convenience, we also publish an Uber JAR to Maven Central that contains the shared libraries for all of the published platforms. While the overall size of the JAR is larger than depending on a platform-specific artifact, it greatly simplifies the task of dependency management for most platforms.

To depend on the uber jar, simply use the conscrypt-openjdk-uber artifacts.

Maven
<dependency>
  <groupId>org.conscrypt</groupId>
  <artifactId>conscrypt-openjdk-uber</artifactId>
  <version>2.5.2</version>
</dependency>
Gradle
dependencies {
  compile 'org.conscrypt:conscrypt-openjdk-uber:2.5.2'
}

Android

The Android AAR file contains native libraries for x86, x86_64, armeabi-v7a, and arm64-v8a.

Gradle

dependencies {
  implementation 'org.conscrypt:conscrypt-android:2.5.2'
}

How to Build

If you are making changes to Conscrypt, see the building instructions.