| Brian Carlstrom | 8113f6d | 2010-06-17 16:46:35 -0700 | [diff] [blame] | 1 | android.patch: |
| 2 | |
| Brian Carlstrom | 7a6b43b | 2010-06-21 11:26:46 -0700 | [diff] [blame] | 3 | patch against Bouncy Castle: |
| 4 | |
| 5 | The main differences involve removing algorithms not included in the |
| 6 | reference implementation (RI). The libcore |
| 7 | java.security.StandardNames test support class provides the most |
| 8 | up-do-date documentation of differences between the RI's list of |
| 9 | supported algorithms and Android's. Some notable omissions versus the |
| 10 | RI: |
| Brian Carlstrom | 7a6b43b | 2010-06-21 11:26:46 -0700 | [diff] [blame] | 11 | - Blowfish |
| 12 | - LDAP |
| 13 | - MD2 |
| 14 | - RC2 |
| 15 | |
| 16 | Other performance (both speed and memory) changes: |
| 17 | - singleton DERNull (BouncyCastle now does this but we make constructor private to be sure) |
| 18 | - similarly made DERBoolean constructor private and moved to DERBoolean.{getInstance,TRUE,FALSE} |
| 19 | - DERPrintableString interns its internal String values |
| 20 | - DERObjectIdentifier interns its internal String indentifer value |
| 21 | - changed uses of 'new Integer' to 'Integer.valueOf' |
| 22 | - Added X509NameElementList to reduce small Vector allocation for X509Name key/value operations |
| 23 | - Replaced X509Extensions hash/vector with new OrderedTable instance to cut down on memory allocation |
| 24 | - PKCS12BagAttributeCarrier also uses OrderedTable to cut down on memory allocation |
| 25 | - X509CertificateObject.getEncoded caches its result |
| 26 | - Added IndexedPKIXParameters for faster cert lookup in CertPathValidatorUtilities.findTrustAnchor |
| 27 | - CertPathValidatorUtilities.findTrustAnchor fast path compares encoded certs similar to PKIXCertPathValidatorSpi |
| 28 | - Added ASN1Collection for use as new parent for ASN1Collection and ASN1Set to reduce small Vector allocation |
| 29 | - removed references to SecretKeyFactory.PBE/PKCS5 SecretKeyFactory.PBE/PKCS12 |
| Brian Carlstrom | 10261d9 | 2010-06-23 00:14:16 -0700 | [diff] [blame] | 30 | - OpenSSLDigest uses NativeCrypto JNI API |
| Brian Carlstrom | 8e55150 | 2010-07-13 14:50:52 -0700 | [diff] [blame] | 31 | - KeyStoreSpis made more tolerant of non-existant and null aliases |
| 32 | - PKCS12 KeyStore.getCreationDate tries to mimic RI behavior on null and missing aliases |
| 33 | - Make PKCS12 KeyStore throw error when setting non-PrivateKey, instead of on get |
| 34 | - Make PKCS12 KeyStore tolerate setting with an empty certificate chain |