Support OpenSSL backend and implement message digest - #1492

Open

KostasTsiounis wants to merge 1 commit into

KostasTsiounis:openssl_backend

KostasTsiounis commented May 22, 2026 •

edited

Loading

Member

With this change, all appropriate code is added to support the use of OpenSSL as a backend. That includes:

Main Java class to load the libraries required and offer native methods.
Adapter Java classes to smoothly integrate without changes with existing code.
Makefiles to compile and link required C code to use OpenSSL.
Additional test tags and general test setup to allow the execution of appropriate tests with the new backend.

Additionally, the first set of algorithms, namely the message digests, are implemented. The aforementioned tags are, also, added to the corresponding tests.

Signed-off-by: Kostas Tsiounis kostas.tsiounis@ibm.com

KostasTsiounis force-pushed the openssl_backend branch from ff3a354 to 26a5ca2 Compare

May 22, 2026 20:25

johnpeck-us-ibm commented Jun 5, 2026

Member

I know we talked about contexts and one for FIPS and one for non-FIPS. Could we use the Property query instead?
sha256 = EVP_MD_fetch(NULL, "SHA2-256", "fips=yes"); - FIPS
sha256 = EVP_MD_fetch(NULL, "SHA2-256", "provider=default"); - Non-FIPS.
Note the NULL for the context.

Does using this have any performance ramifications?

KostasTsiounis force-pushed the openssl_backend branch from 04bc9c2 to d4a4c94 Compare

June 16, 2026 18:37

KostasTsiounis force-pushed the openssl_backend branch 2 times, most recently from 1b76bd7 to 31add61 Compare

July 7, 2026 20:28

KostasTsiounis force-pushed the openssl_backend branch 2 times, most recently from 8920c23 to 0e09aab Compare

July 21, 2026 15:39

jasonkatonica requested a review from thu-ibm

July 21, 2026 18:14

KostasTsiounis force-pushed the openssl_backend branch from c43bb68 to 117b14c Compare

July 31, 2026 00:05

KostasTsiounis marked this pull request as ready for review

July 31, 2026 00:05

KostasTsiounis requested review from JinhangZhang, Mohit-Rajbhar100698, jasonkatonica, johnpeck-us-ibm and taoliult

July 31, 2026 00:06

johnpeck-us-ibm requested changes

View reviewed changes

src/main/java/com/ibm/crypto/plus/provider/base/NativeImplementation.java Outdated

src/main/java/com/ibm/crypto/plus/provider/ock/NativeOCKAdapterNonFIPS.java Outdated

src/main/java/com/ibm/crypto/plus/provider/openssl/NativeOpenSSLAdapter.java Outdated

src/main/native/openssl/Digest.c Outdated

src/main/native/openssl/Digest.c

thu-ibm reviewed

View reviewed changes

src/main/java/com/ibm/crypto/plus/provider/openssl/NativeOpenSSLAdapter.java Outdated

thu-ibm reviewed

View reviewed changes

src/main/java/com/ibm/crypto/plus/provider/openssl/NativeOpenSSLAdapterNonFIPS.java Outdated

thu-ibm reviewed

View reviewed changes

src/main/java/com/ibm/crypto/plus/provider/openssl/OpenSSLException.java Outdated

thu-ibm reviewed

View reviewed changes

src/main/java/com/ibm/crypto/plus/provider/openssl/OpenSSLException.java

thu-ibm reviewed

View reviewed changes

src/main/native/openssl/Utils.c

KostasTsiounis requested review from johnpeck-us-ibm and thu-ibm

August 6, 2026 17:43

taoliult reviewed

View reviewed changes

src/test/java/ibm/jceplus/junit/tests/TestArguments.java

KostasTsiounis force-pushed the openssl_backend branch from dea939a to 1bb6a35 Compare

August 6, 2026 20:45

KostasTsiounis requested a review from taoliult

August 6, 2026 20:46

KostasTsiounis force-pushed the openssl_backend branch from 1bb6a35 to 555ccec Compare

August 7, 2026 16:16

KostasTsiounis changed the title ~~Openssl backend~~ Support OpenSSL backend and implement message digest

johnpeck-us-ibm approved these changes

View reviewed changes

JinhangZhang reviewed

View reviewed changes

src/main/native/openssl/Digest.c Outdated

JinhangZhang reviewed

View reviewed changes

src/main/java/com/ibm/crypto/plus/provider/base/Digest.java

JinhangZhang reviewed

View reviewed changes

src/main/native/openssl/Digest.c

jasonkatonica requested changes

View reviewed changes

src/main/native/openssl/Digest.c Outdated

src/main/java/com/ibm/crypto/plus/provider/openssl/NativeOpenSSLAdapter.java Outdated

src/main/native/openssl/Digest.c Outdated

src/main/native/openssl/Utils.c Outdated

src/main/native/openssl/Utils.c Outdated

src/main/java/com/ibm/crypto/plus/provider/base/Digest.java

src/main/native/openssl/Digest.c Outdated

src/main/java/com/ibm/crypto/plus/provider/openssl/NativeOpenSSLAdapter.java Outdated

src/main/java/com/ibm/crypto/plus/provider/openssl/NativeOpenSSLAdapter.java

src/main/native/openssl/Digest.c

JinhangZhang reviewed

View reviewed changes

src/main/java/com/ibm/crypto/plus/provider/openssl/NativeOpenSSLAdapterNonFIPS.java

KostasTsiounis requested review from JinhangZhang and jasonkatonica

August 20, 2026 21:12

KostasTsiounis force-pushed the openssl_backend branch from 521f2a4 to 9db9a0b Compare

August 20, 2026 21:20

thu-ibm approved these changes

View reviewed changes

KostasTsiounis force-pushed the openssl_backend branch from fdd6070 to f01a83d Compare

August 25, 2026 21:30

KostasTsiounis mentioned this pull request

Support OpenSSL backend and implement message digest #1746

Draft

KostasTsiounis force-pushed the openssl_backend branch from f01a83d to 83363fd Compare

September 1, 2026 22:50

KostasTsiounis commented Sep 2, 2026

Member Author

I added some additional guards for z/OS, since OpenSSL is not available there with e6a77cb

jasonkatonica requested changes

View reviewed changes

src/main/java/com/ibm/crypto/plus/provider/openssl/NativeOpenSSLAdapter.java

KostasTsiounis requested a review from jasonkatonica

September 3, 2026 18:22

jasonkatonica requested changes

View reviewed changes

src/main/java/com/ibm/crypto/plus/provider/openssl/NativeOpenSSLAdapter.java Outdated

KostasTsiounis requested a review from jasonkatonica

September 8, 2026 15:38

taoliult approved these changes

View reviewed changes

taoliult left a comment

Collaborator

LGTM

jasonkatonica approved these changes

View reviewed changes

jasonkatonica left a comment

Member

LGTM

JinhangZhang approved these changes

View reviewed changes

JinhangZhang left a comment

Collaborator

LGTM

KostasTsiounis force-pushed the openssl_backend branch from 4f362c4 to c6d5804 Compare

September 10, 2026 18:55


          Support OpenSSL backend and implement message digest

1a53470

With this change, all appropriate code is added to support
the use of OpenSSL as a backend. That includes:
- Main Java class to load the libraries required and offer
  native methods.
- Adapter Java classes to smoothly integrate without changes
  with existing code.
- Makefiles to compile and link required C code to use
  OpenSSL.
- Additional test tags and general test setup to allow the
  execution of appropriate tests with the new backend.

Additionally, the first set of algorithms, namely the
message digests, are implemented. The aforementioned
tags are, also, added to the corresponding tests.

Signed-off-by: Kostas Tsiounis <kostas.tsiounis@ibm.com>

KostasTsiounis force-pushed the openssl_backend branch from c6d5804 to 1a53470 Compare

September 10, 2026 20:39

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Labels

None yet