search

TritonDataCenter / java-http-signature

Library for performing RSA signed HTTP requests in Java
Mozilla Public License 2.0
16 stars 12 forks source link

allow NSS via PKS#11 to be used for ECDSA singing #23

Closed cburroughs closed 7 years ago

cburroughs commented 7 years ago

On a reasonable public cloud container, SunPKCS11-NSS is roughly 50% faster than BouncyCastle, making this reflection jungle gym worthwhile. If the reflection fails (lacking a logging framework) we print to stderr and move on.

NOTE: This is bound to the internals of BouncyCastle, so trivial upstream changes could break this class.

ref #9

cburroughs commented 7 years ago

So I've run this in an LX brand (with and without NSS configured), and my Linux workstation. I'm not sure where else to try (benchmark.jar should be a sufficient test) that is likely to break.

cburroughs commented 7 years ago

Landed with suggested changes.