Assorted test code for JCE and JSSE.
Dumps all registered crypto providers
java -cp target/classes net.eckenfels.test.jce.JCEProviderInfo
Run the JUnit test for net.eckenfels.test.jce.HashOVerflowTest to verify SHA-1 test vectors for 257GB null bytes (see http://comments.gmane.org/gmane.comp.encryption.gpg.devel/18244)
This class can be used to simulate SSL Handshakes (with and without local crypto).
java -cp target/classes net.eckenfels.test.ssl.SimpleBIOSSLClient [<hostname> [<portnum> [<snihostname>]]]
- hostname defaults to
173.194.35.178(google.com) - portnum defaults to
443(https) - snihostname defaults to
null(do not send)
This class can be used to test aspects around cipher suites and handshakes of the JSSE SSLServerSocket
java -cp target/classes net.eckenfels.test.ssl.JSSESocketServer
It will isten to 0.0.0.0:1234 to one SSL connection, print out all handshake events, after 30 seconds disable all handshake ciphers, and then after 30 more seconds exit the test. It answers with a short greeting and a http/1.1 session with no keep-alive.
https://howsmyssl.com is a Site for testing Web Browsers and other SSL/TLS clients for
ciphers and other settings. The net.eckenfels.test.howsmyssl.Client class opens
a SSL connection with the default provider of the VM and outputs the result from this web site.
This code contains optionally hints on how to configure the supported SSL protocols as well as setting the endpoint identification (required by raw sockets to defend against MITM attacks).
Example:
c:\> java -cp target\classes net.eckenfels.test.howsmyssl.Client
Howsmyssl Test: Java HotSpot(TM) 64-Bit Server VM 1.8.0-b129/25.0-b69 on Windows 7 6.1
Cipher used TLSv1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
HTTP/1.1 200 OK
Content-Length: 1578
Connection: close
Content-Type: application/json
Date: Sat, 15 Feb 2014 23:53:35 GMT
Strict-Transport-Security: max-age=631138519; includeSubdomains
{"given_cipher_suites":["TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
"TLS_RSA_WITH_AES_128_CBC_SHA256",
"TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
"TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256",
"TLS_DHE_RSA_WITH_AES_128_CBC_SHA256",
"TLS_DHE_DSS_WITH_AES_128_CBC_SHA256",
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
"TLS_RSA_WITH_AES_128_CBC_SHA",
"TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
"TLS_ECDH_RSA_WITH_AES_128_CBC_SHA",
"TLS_DHE_RSA_WITH_AES_128_CBC_SHA",
"TLS_DHE_DSS_WITH_AES_128_CBC_SHA",
"TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
"TLS_ECDHE_RSA_WITH_RC4_128_SHA",
"TLS_RSA_WITH_RC4_128_SHA",
"TLS_ECDH_ECDSA_WITH_RC4_128_SHA",
"TLS_ECDH_RSA_WITH_RC4_128_SHA",
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256",
"TLS_DHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_DHE_DSS_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
"TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
"TLS_RSA_WITH_3DES_EDE_CBC_SHA",
"TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
"TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
"TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
"TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
"TLS_RSA_WITH_RC4_128_MD5",
"TLS_EMPTY_RENEGOTIATION_INFO_SCSV"],
"ephemeral_keys_supported":true,
"session_ticket_supported":false,
"tls_compression_supported":false,
"unknown_cipher_suite_supported":false,
"beast_vuln":false,
"able_to_detect_n_minus_one_splitting":false,
"insecure_cipher_suites":{},
"tls_version":"TLS 1.2",
"rating":"Improvable"}
Simple PRNG SecureRandom timings:
java -cp target/classes net.eckenfels.test.jce.SecureRandomInfo
new SecureRandom() SHA1PRNG SUN
SecureRandom.getInstanceStrong Windows-PRNG SunMSCAPI
Windows-PRNG SunMSCAPI : java.security.SecureRandom Seeded in 5,441 ms.
Windows-PRNG SunMSCAPI : java.security.SecureRandom nextInt() in 6,619 ms.
Windows-PRNG SunMSCAPI : java.security.SecureRandom nextInt() in 0,144 ms.
Windows-PRNG SunMSCAPI : java.security.SecureRandom nextInt() in 0,112 ms.
Windows-PRNG 10000*int Took 901,402 ms with instantiation/seeding.
Windows-PRNG 10000*int Took 797,608 ms without instantiation/seeding
SHA1PRNG SUN : java.security.SecureRandom Seeded in 0,247 ms.
SHA1PRNG SUN : java.security.SecureRandom nextInt() in 315,138 ms.
SHA1PRNG SUN : java.security.SecureRandom nextInt() in 0,058 ms.
SHA1PRNG SUN : java.security.SecureRandom nextInt() in 0,049 ms.
SHA1PRNG 10000*int Took 329,125 ms with instantiation/seeding.
SHA1PRNG 10000*int Took 7,351 ms without instantiation/seeding.
A simple example to generate DH domain parameters and a secret key (including finding the largest prime length supported and timing)
JCE Provider Info: Java HotSpot(TM) 64-Bit Server VM 1.8.0_25-b18/25.25-b02 on Windows 7 6.1
Largest Parameter: 2048 DiffieHellman@SunJCE version 1.8
generated parameter in 11,461s: SunJCE Diffie-Hellman Parameters:
p: ...
g: ...
l: 2047
generated key in 189,545ms: SunJCE Diffie-Hellman Public Key:
y:
3fd4b877 3fc42a2e a630991c c3f92d83 fce8e804 98d33bfe 44bb9d19 4c1f934d
dd5c55f8 32d98f70 fd74b759 d39491c7 5a19680d c9e75380 75a29d25 52dda40c
4a97bf5b 1202b9e5 6377e5a7 79dc5c1f 2b35e8d7 46136d31 35aa8f9d 9e4e1dd0
1021c81b 875b8d4f 3e6b3444 45fbed69 c4f14851 cf656c61 699c2ebc 9450a132
f8ec7c6f c7711d04 650eed3d 70651f7b ef37bcc7 f6300337 717e65b5 244459ec
a01aa71a 9787a8b2 b40dc37b 0b6ef5c1 ed6ee1ee 522ede72 b08cbf09 1b44d6a4
96f87b9b 38143d20 d42260c8 3a79ef3e bcf3c801 083bfc34 3785f514 53e03e82
73c7a843 47a86c90 e28e1227 a93bd541 93b8484a 124c36ef d98839f1 887bf70d
p:
f9ab8671 299984dd 0698288e 93ae3ad5 50c37ddc 980ff37a aa6730f8 e8fda9f7
b0302620 631ccc35 fef21b76 d11c5587 4d344be4 001edff5 6772529b 1db917d4
286de70a ead5acc7 a213f746 74a146e3 aea675e4 c02cac33 b5e634fe b2bdf148
d83397de 6bee0a97 cab3b9d3 614d5503 b25f2034 6dc77d71 8d58323a 44156aa5
c826b152 352e64fa e5b3baa2 8e1b3566 7dcc7ddc 5a15d28d 0993f16a 92b9c788
e0293247 931f9dfa 418a0be2 7590d332 7c6a8958 f84df718 e364904d 89fc5f7c
e77e6675 2c879718 87fdcc3e ef7c9356 9373b79e 3a731bb0 744b4fca 24718505
9fff6738 7793faba aad924f1 11445a9b cd7e59b4 c60da8b8 0b128774 4598686d
g:
d9ed5134 0651dffb 45d911b3 f465a999 a04e86f0 829fce3a dff2ddaf b6400ab3
117bc045 637c12ac 18256a8a 3e63dd73 2d9ec12b 978d6dc6 566e732c f6cc2246
d1a7039d a39fde7e e2958ac9 06f8f1ff f4270a51 d8465fe5 1271c940 6485cfa4
2317aadf 6318b0a5 d7a971cd 0e1a18d7 43d8ff32 65788c34 647e4ed3 dce95464
4d588c68 6bacedcf de62b333 ce40af65 e6f7ea4e 5f393769 0bd56ce0 cda82589
67e3db24 354f3143 d6cbe514 f272a45f d8bfebea 7b4a7d27 8bbf12ba cd7c746c
7e3a9659 b40acf7e 89c58c00 dcb8f875 41afaeaa 5fdd3e88 4dc204f3 d41590f3
5f808ffd b1f08826 3b5d0155 a88a26f7 9f7aae75 1ea8bd7b 99a62335 7e97f91f
l: 2047
of for Oracle Java 6u38
JCE Provider Info: Java HotSpot(TM) 64-Bit Server VM 1.6.0_38-b05/20.13-b02 on Windows 7 6.1
Largest Parameter: 1024 DiffieHellman@SunJCE version 1.6
generated parameter in 3,514s: SunJCE Diffie-Hellman Parameters:
...
l: 1023
generated key in 56,800ms: SunJCE Diffie-Hellman Public Key:
y:
9a69216a 1eee7210 f68fcb90 168bd51c b4d29a61 c768b994 7e020e56 5bee41ab
e052d444 62a4afcb 3fafbc59 475f1b2f 5cd51f75 4bd84dd6 696343df 94eefe13
157ad20c c03d5bb2 39402e77 85c552f9 dcca2406 c891be47 a3925da8 ed2d82c9
dd8ddf57 ef626fcb 4dac14e8 c765dce8 b89900f3 fa882324 c4cc074e 65e9e09b
p:
bf7b649a ffd3ae70 384ae0bf ad7f3e50 ecfdde3d 68d9a043 72f1ba34 b4ecc7bf
f8ed1ee3 672d2c01 85ab9d82 3c3e7402 f8537d6d a656ff78 e022c403 cf29b770
42f256fb 283df67f ab005316 021ca9d1 e8a31018 9f498617 8a66c5a0 72c070ee
8a913e7e d73de3a2 51f62ab5 30b0fb3d 99603338 d3154555 01253488 bb009ad3
g:
1500d3c6 bf19532d f8cbf782 d377197f 1efd747f 9581e830 a0441e61 6f48f3de
23d636b0 3e0885ff 88a06c78 2a163b71 a7eec710 4f1025c5 3407755d 25368922
4412507b dde33cb2 d3d3a0ba ca8930e2 c68d8461 0839fd17 2be7cb7e da862c35
b3a255ad eac8a1d0 62f96acb efaceacd a8a33572 c48b1993 f73f0573 129bcc2a
l:
1023
or for IBM 7.1fp1
JCE Provider Info: IBM J9 VM pwa6470_27sr1fp1-20140712_01 (SR1 FP1)/2.7 on Windows 7 6.1
Largest Parameter: 2048 DiffieHellman@IBMJCE version 1.7
generated parameter in 12,901s: IBMJCE Diffie-Hellman Parameters:
p: 253504876171107609513831447562036027...095977
g: 215657145849725589509182685355584676...967301
l: 2047
generated key in 170,673ms: IBMJCE Diffie-Hellman Public Key:
y: 11867797386516842148561899893258105301896057753502645951276849652837880363114568474571279654353724783656640004811317113001733628178123921718420650662596389945378099443560834533176514173944997667956622083355429163561107449390264516141880971750366204033430813975845550513364253241027381824989426925067175486881711706675881691560017427026245240514503538068057432532299419924803936411349956001271544104204541357959365868087262544484791656598234064265614065616982700115450059254608543934944398961445880567173775642076816861090770087157796518407123633297281898282636192707775160436478533186687919558919437698825009166718124
p: 253504876171107609513831447562036027...095977
g: 215657145849725589509182685355584676...967301
l: 2047
Example: (with a modified java.security file)
c:\> java -Djdk.tls.ephemeralDHKeySize=2048 -cp target\classes net.eckenfels.test.weakdh.Client
WeakDH Test: Java HotSpot(TM) 64-Bit Server VM 1.8.0_40-b25/25.40-b25 on Windows 7 6.1
disabledAlgorithms=MD5, RC4, SSLv3, DSA, RSA keySize < 2048, DHE keySize < 1024, DiffieHellman keySize < 1024, DH keySize < 1024 ephemeralDHKeySize=2048
Requesting default SF resulted in sun.security.ssl.SSLSocketFactoryImpl aka sun.security.ssl.SSLSocketFactoryImpl@65b54208
protocols old enabled [TLSv1, TLSv1.1, TLSv1.2] supported [SSLv2Hello, SSLv3, TLSv1, TLSv1.1, TLSv1.2] and active [TLSv1.2, TLSv1.1, TLSv1]
prim [KEY_AGREEMENT] TLSv1 with null
...
prim [SIGNATURE] SHA256withRSA on Sun RSA public key, 2048 bits
modulus: 18021508317891126045114383893640587389787314988023771299021472384098480478916503597778296613150634219765052113517870635171403307225477983047468706279013651027886500159485348697094115927961850381525182009137128777951162358715158533528593200093291791323275973789174789209802980910482500744419318360338528025872227868058578212418244189425301367382232973595110901594292490129763308095314503250053957090379265992785603931784956681691284995547158646635183735467516188519673313343149548166538558424521681954529559978463371620234598058977077392872218941503229331579208118464720991080636709101634982701306129953489796945248933
public exponent: 65537 with null
Cipher used TLSv1.2 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
---
HTTP/1.1 200 OK
Server: nginx/1.4.6 (Ubuntu)
Date: Sat, 23 May 2015 15:47:57 GMT
Content-Type: text/html
<html><body>
<h2>If you can view this page, your browser is vulnerable to the LogJam attack.</h2>
</body></html>
You can also use net.eckenfels.test.ssl.HttpsConnection to test connecting this site.
Lists the length in bytes of the Mac (L=) and generated Keys (KL=) of the KeyGenerator (to show legacy length decisions).
HmacMD5 L = 16 KL = 64
HmacSHA1 L = 20 KL = 64
HmacSHA256 L = 32 KL = 32
HmacSHA384 L = 48 KL = 48
HmacSHA512 L = 64 KL = 64
HmacSHA224 java.security.NoSuchAlgorithmException: HmacSHA224 KeyGenerator not available
Allows to inspect certificate details of https-URLs. It can calculate the checksum of the public key info block required for HPKP aswell as SKI hashes and certificate fingerprints.
java net.eckenfels.test.ssl.UrlInspect https://developer.google.com
Connect to https://developer.google.com ...
-- Server Response Header --
HTTP/1.1 200 OK (TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA)
Content-Language: [en]
X-XSS-Protection: [1; mode=block]
Expires: [Wed, 23 Mar 2016 02:33:52 GMT]
Alternate-Protocol: [443:quic,p=1]
Last-Modified: [Wed, 23 Mar 2016 01:33:52 GMT]
Connection: [close]
Server: [Google Frontend]
X-Content-Type-Options: [nosniff]
Cache-Control: [max_age=3600, public, must-revalidate]
X-Frame-Options: [SAMEORIGIN]
Strict-Transport-Security: [max-age=31536000; includeSubdomains]
Alt-Svc: [quic=":443"; ma=2592000; v="31,30,29,28,27,26,25"]
Vary: [Accept-Language]
Date: [Wed, 23 Mar 2016 01:33:52 GMT]
Content-Type: [text/html; charset=utf-8]
-- Certificate Chain --
#0
Subject CN=*.google.com, O=Google Inc, L=Mountain View, ST=California, C=US
Alternative Name: [[2, *.google.com], [2, *.android.com], [2, *.appengine.google.com], [2, *.cloud.google.com], [2, *.google-analytics.com], [2, *.google.ca], [2, *.google.cl], [2, *.google.co.in], [2, *.google.co.jp], [2, *.google.co.uk], [2, *.google.com.ar], [2, *.google.com.au], [2, *.google.com.br], [2, *.google.com.co], [2, *.google.com.mx], [2, *.google.com.tr], [2, *.google.com.vn], [2, *.google.de], [2, *.google.es], [2, *.google.fr], [2, *.google.hu], [2, *.google.it], [2, *.google.nl], [2, *.google.pl], [2, *.google.pt], [2, *.googleadapis.com], [2, *.googleapis.cn], [2, *.googlecommerce.com], [2, *.googlevideo.com], [2, *.gstatic.cn], [2, *.gstatic.com], [2, *.gvt1.com], [2, *.gvt2.com], [2, *.metric.gstatic.com], [2, *.urchin.com], [2, *.url.google.com], [2, *.youtube-nocookie.com], [2, *.youtube.com], [2, *.youtubeeducation.com], [2, *.ytimg.com], [2, android.clients.google.com], [2, android.com], [2, g.co], [2, goo.gl], [2, google-analytics.com], [2, google.com], [2, googlecommerce.com], [2, urchin.com], [2, youtu.be], [2, youtube.com], [2, youtubeeducation.com]]
Issuer CN=Google Internet Authority G2, O=Google Inc, C=US
Signature SHA256withRSA from:Wed Mar 09 12:18:04 CET 2016 - Tue Jun 07 02:00:00 CEST 2016 Key EC
#1
Subject CN=Google Internet Authority G2, O=Google Inc, C=US
Issuer CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
Signature SHA256withRSA from:Fri Apr 05 17:15:56 CEST 2013 - Sun Jan 01 00:59:59 CET 2017 Key RSA
#2
Subject CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
Issuer OU=Equifax Secure Certificate Authority, O=Equifax, C=US
Signature SHA1withRSA from:Tue May 21 06:00:00 CEST 2002 - Tue Aug 21 06:00:00 CEST 2018 Key RSA
-- Server Certificate --
Subject CN=*.google.com, O=Google Inc, L=Mountain View, ST=California, C=US
v3 serial 21933373990a7990
Thumbprint SHA256 c38fb0ce7783776a14b5229859809336e7400e88aa32bf2e0ea5056fd207c82b
Thumbprint SHA1 9970d67cb8427118dca688dbdcc86966969d5188
Public Key: Sun EC public key, 256 bits
public x coord: 19096264774409158746149655369491192997360979366810254666240547491450269095665
public y coord: 74482336179872778120611899634942297230025368082430124059396331957476587695769
parameters: secp256r1 [NIST P-256, X9.62 prime256v1] (1.2.840.10045.3.1.7)
Public-Key-Pins: pin-sha256="y5u+9shpOZVftaMmkM2zj837knujPaznnMTp8U9XQpA=" (cb9bbef6c86939955fb5a32690cdb38fcdfb927ba33dace79cc4e9f14f574290)
SKI(SHA1) Ext 1007b443d7275cbaec8c455b39a66121d6433c76
SKI(SHA1) Calc dee64fedfc7821a0591d4937a2c6ce0d9c85ab30 <- bug
AKI(SHA1) Ext 4add06161bbcf668b576f581b6bb621aba5a812f
AKI(SHA1) Calc 4add06161bbcf668b576f581b6bb621aba5a812f
Issuer CN=Google Internet Authority G2, O=Google Inc, C=US
Signature SHA256withRSA from:Wed Mar 09 12:18:04 CET 2016 - Tue Jun 07 02:00:00 CEST 2016
If you have a JKS file you can use this class to extract all certificate(chain)s. This is especially helpful if you have a KeyStore which does no longer open because of certificates with illegal DER encoding (leading zeros) which are rejected with Java 8u121+8u131.
java -cp target/classes net.eckenfels.test.certpath.KeystoreExploder c:\temp\broken.jks certdir
This will create the specified target directory certdir and one .crt entry per Keystore Alias.
Those files are PEM-style certificate (chains) with some clear text headers.
On a directory containign *.crt or *.cer files (maybe generated by KeystoreExploder) you can run the
following command to check if the certificate parses and what the Subject DN is:
java -cp target/classes net.eckenfels.test.certpath.CertExplorer certdir
Typically you will use older Java to explode the JKS and newer Java to valiate the extracted cert files. For each problematic certification file the name and the exception is printed:
loading C:\temp\certdir\alias1.crt CN=Test, C=US
loading C:\temp\certdir\alias2.crt ???java.security.cert.CertificateParsingException:
java.io.IOException: subject key, java.security.InvalidKeyException: Invalid RSA public key
java.security.cert.CertificateParsingException: java.io.IOException: subject key, java.security.InvalidKeyException: Invalid RSA public key
at sun.security.x509.X509CertInfo.<init>(X509CertInfo.java:169)
at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1804)
at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:195)
at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:102)
at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:339)
at net.eckenfels.test.certpath.CertExplorer.main(CertExplorer.java:47)
...
loading C:\temp\certdir\alias3.crt CN=Test, C=US
In order to test stricter ASN.1 parsing of Oracle/Open JDK 8u121+8u131 as well as BC 1.56 and 1.57 this method allows to generate self signed RSA certificates with redundant leading 0s in serial number and exponent.
java -cp target/*.jar net.eckenfels.test.certpath.BrokenCert
...
Cert: self-serial
-----BEGIN CERTIFICATE-----
MIIBlDCB/qADAgECAgIAQjANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdzdWJqZWN0MBoXCzE2
MTIzMTAwMDBaFwsxODEyMzEwMDAwWjASMRAwDgYDVQQDEwdzdWJqZWN0MIGfMA0GCSqGSIb3DQEB
AQUAA4GNADCBiQKBgQCBYz9Rm/W6O7bb58Dx34iAA/6kJZMpOstuih9P6+lFQ79CGD548Ix+XxfX
i0DW1IGpIu4uZmWiQJTqdUSZ/zPCHFaUJFFC7T50bBjSY2xZrmLZ5VT0SeOB8ShXTjGGAeXO1IVu
/3jY1CvlbI8PhJUOcTRad8j1VbGUR3P1b/XBWwIDAQABMA0GCSqGSIb3DQEBBQUAA4GBAEosh6n2
YT0tR1u1i9voK1FBYfwTymemg22/hsLMhnV01d+xCzbVU2/5AyWCm/kq7VrTPkF2Rwhtf0xErW5Y
4xIFLr5tdBDlw4g4pm8wG+svTfdo43CaDFm6ZYtfURWmMU4sWIdaxmy5WXiPVbnVZeITh2AetJhW
27cHCCTFzOj6
-----END CERTIFICATE-----
Verify C:\ws\github\JavaCryptoTest\target\self-serial.crt
? Failed JDK: java.security.cert.CertificateParsingException: java.io.IOException: Invalid encoding: redundant leading 0s
? Failed BC: org.bouncycastle.jcajce.provider.asymmetric.x509.CertificateFactory$ExCertificateException
? Failed BC PEM: org.bouncycastle.jcajce.provider.asymmetric.x509.CertificateFactory$ExCertificateException
It will generate different self-signed certificates and a JKS with containing self-ok.crt with keystore and entry password "pass".