Mailing-List: contact dev-help@harmony.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@harmony.apache.org
Received-SPF: pass (herse.apache.org: domain of sergey.v.dmitriev@gmail.com
 designates 64.233.166.177 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=OIgaI96Om2mnw3z4y160zvj64epFqlkRgpzyNm0bR8MrCpxvsXe6EeWkGpUZ0lvPsUgdXVeH/zUkGqUE6FE0EAiomOzLlf3J0VJjuViBjPVj0O68x89UEWcMgz6KnuExCMFF9BD4hbAUX/03fyOp+M4xd1mhE7rQM5UYsvv5EGs=
Message-ID: <bd8d07180705050305g52a666aau32c1f79da90166ea@mail.gmail.com>
Date: Sat, 5 May 2007 14:05:00 +0400
From: "Sergey Dmitriev" <sergey.v.dmitriev@gmail.com>
To: dev@harmony.apache.org
Subject: Re: Diffie-Hellman KeyPairGenerator problem
In-Reply-To: <6e47b64f0705032330g48a85158qd5fa3028d2afff80@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <bd8d07180705030534o778d6172l5acf708e511da518@mail.gmail.com>
	 <6e47b64f0705032330g48a85158qd5fa3028d2afff80@mail.gmail.com>

Yes, the case you mentioned hangs on my side as well.

Well I've replaced Harmony's math.jar with JRockit's math classes -
the same picture, it just hangs. It is not about math.  I've taken a
walk to BC sources and found that it does not actually hangs up - it
just works very long. The problem is in safe primes generation for DH
in org.bouncycastle.crypto.generators.DHParametersHelper.generateSafePrimes().

The default values I found there are: strength = 1024 bit, certainty = 20.

Probably some crypto specialists can comment this issue out.

BTW the given testcase comes "back to life" in 12-15 minutes on
my box.


Thank
Sergey


On 5/4/07, Stepan Mishura <stepan.mishura@gmail.com> wrote:
> On 5/3/07, Sergey Dmitriev <sergey.v.dmitriev@gmail.com> wrote:
> > Guys
> >
> > could some of you take a look at java.security.KeyPairGenerator?
> > It hangs while generating public/private key pair.
> >
>
> The test hands for me on BEA JRockit. I did the following:
> 1) modify a test from JIRA - add provider name param to method:
> KeyPairGenerator.getInstance("DH", "BC");
> 2) copy <classlib>/depends/jars/bcprov-jdk15-136/bcprov.jar to
> jre/lib/ext directory
> 3) add line to java.security file:
> security.provider.7=org.bouncycastle.jce.provider.BouncyCastleProvider
>
> Could you reproduce it?
>
> -Stepan.
>
> > I filed JIRA with respect to this:
> > https://issues.apache.org/jira/browse/HARMONY-3789.
> >
> >
> > Thanks
> > Sergey
> >
>
>
> --
> Stepan Mishura
> Intel Enterprise Solutions Software Division
>