Google Git
Sign in
android / platform / external / conscrypt / 9a0591781a5da76b9fec9b6dc1f0b7a8df6aee4e
commit9a0591781a5da76b9fec9b6dc1f0b7a8df6aee4e[log] [tgz]
authorAdam Langley <agl@google.com>Wed Mar 09 15:56:58 2022 -0800
committerPete Bentley <prb@google.com>Thu Apr 11 17:34:23 2024 +0100
tree3c6209452dcf8fe44b00524ebf3c2477eaca5863
parent54e1a8ba0f82c33d39797c8788b9b1529c128d58 [diff]
Add scrypt support.

Cherry-picked from upstream PR #1054.

The KeySpec added here has method names that match BouncyCastle, and
the factory will use reflection on unknown KeySpec types. Thus it's
possible for code that currently uses scrypt from BC to transparently
benefit from conscrypt.

(The vast majority of this change was written by prb.)

Bug: 331613998
Bug: 303794624
Test: MTS
Co-authored-by: Adam Langley <agl@chromium.org>
Co-authored-by: Pete Bentley <44170157+prbprbprb@users.noreply.github.com>
Change-Id: Ib217f7a6b5e3817e68618d2f2a43cd954214a2d3
12 files changed
tree: 3c6209452dcf8fe44b00524ebf3c2477eaca5863
  1. android/
  2. android-stub/
  3. apex/
  4. api/
  5. api-doclet/
  6. benchmark-android/
  7. benchmark-base/
  8. benchmark-graphs/
  9. benchmark-jmh/
  10. common/
  11. constants/
  12. gradle/
  13. libcore-stub/
  14. licenses/
  15. openjdk/
  16. openjdk-uber/
  17. platform/
  18. publicapi/
  19. release/
  20. repackaged/
  21. srcgen/
  22. test-support/
  23. testing/
  24. .clang-format
  25. .gitignore
  26. .lgtm.yml
  27. .travis.yml
  28. Android.bp
  29. build.gradle
  30. BUILDING.md
  31. CAPABILITIES.md
  32. conscrypt-lite-jarjar-rules.txt
  33. CONTRIBUTING.md
  34. CPPLINT.cfg
  35. gradle.properties
  36. gradlew
  37. gradlew.bat
  38. IMPLEMENTATION_NOTES.md
  39. LICENSE
  40. lint-baseline.xml
  41. METADATA
  42. MODULE_LICENSE_APACHE2
  43. NOTICE
  44. OWNERS
  45. PREUPLOAD.cfg
  46. README.android
  47. README.md
  48. settings.gradle
  49. test_logging.properties
README.md

Conscrypt - A Java Security Provider

Conscrypt is a Java Security Provider (JSP) that implements parts of the Java Cryptography Extension (JCE) and Java Secure Socket Extension (JSSE). It uses BoringSSL to provide cryptographic primitives and Transport Layer Security (TLS) for Java applications on Android and OpenJDK. See the capabilities documentation for detailed information on what is provided.

The core SSL engine has borrowed liberally from the Netty project and their work on netty-tcnative, giving Conscrypt similar performance.

Download

Conscrypt supports Java 7 or later on OpenJDK and Gingerbread (API Level 9) or later on Android. The build artifacts are available on Maven Central.

Download JARs

You can download the JARs directly from the Maven repositories.

OpenJDK (i.e. non-Android)

Native Classifiers

The OpenJDK artifacts are platform-dependent since each embeds a native library for a particular platform. We publish artifacts to Maven Central for the following platforms:

ClassifierOSArchitecture
linux-x86_64Linuxx86_64 (64-bit)
osx-x86_64Macx86_64 (64-bit)
windows-x86Windowsx86 (32-bit)
windows-x86_64Windowsx86_64 (64-bit)

Maven

Use the os-maven-plugin to add the dependency:

<build>
  <extensions>
    <extension>
      <groupId>kr.motd.maven</groupId>
      <artifactId>os-maven-plugin</artifactId>
      <version>1.4.1.Final</version>
    </extension>
  </extensions>
</build>

<dependency>
  <groupId>org.conscrypt</groupId>
  <artifactId>conscrypt-openjdk</artifactId>
  <version>2.5.2</version>
  <classifier>${os.detected.classifier}</classifier>
</dependency>

Gradle

Use the osdetector-gradle-plugin (which is a wrapper around the os-maven-plugin) to add the dependency:

buildscript {
  repositories {
    mavenCentral()
  }
  dependencies {
    classpath 'com.google.gradle:osdetector-gradle-plugin:1.4.0'
  }
}

// Use the osdetector-gradle-plugin
apply plugin: "com.google.osdetector"

dependencies {
  compile 'org.conscrypt:conscrypt-openjdk:2.5.2:' + osdetector.classifier
}

Uber JAR

For convenience, we also publish an Uber JAR to Maven Central that contains the shared libraries for all of the published platforms. While the overall size of the JAR is larger than depending on a platform-specific artifact, it greatly simplifies the task of dependency management for most platforms.

To depend on the uber jar, simply use the conscrypt-openjdk-uber artifacts.

Maven
<dependency>
  <groupId>org.conscrypt</groupId>
  <artifactId>conscrypt-openjdk-uber</artifactId>
  <version>2.5.2</version>
</dependency>
Gradle
dependencies {
  compile 'org.conscrypt:conscrypt-openjdk-uber:2.5.2'
}

Android

The Android AAR file contains native libraries for x86, x86_64, armeabi-v7a, and arm64-v8a.

Gradle

dependencies {
  implementation 'org.conscrypt:conscrypt-android:2.5.2'
}

How to Build

If you are making changes to Conscrypt, see the building instructions.