Summary: Extract cryptographic keys within NSS PKCS11 software tokens for memory management purposes.
Reviewed-by: valeriep

Summary: Updated SunPKCS11 provider with SunJCE provider behavior
Reviewed-by: xuelei

8135248: Add utility methods to check indexes and ranges
8142493: Utility methods to check indexes and ranges doesn't specify behavior when function produces null
8146458: Improve exception reporting for Objects.checkIndex/checkFromToIndex/checkFromIndexSize
8155794: Move Objects.checkIndex BiFunction accepting methods to an internal package
Summary: Do bounds check per encryption/decryption call instead of per block
Reviewed-by: mbalao

Reviewed-by: phh, mbalao, bae

Reviewed-by: ascarpino, ssahoo, skoivu

Reviewed-by: mullan, ahgross, rhalade, mbalao, andrew

Reviewed-by: xuelei, ahgross, jnimeh, mullan, rhalade

Summary: New implementation of ECDH and ECDSA forsome prime-order curves
Reviewed-by: ascarpino, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Reviewed-by: vinnie

Summary: internal library enhancements to support ECC implementatation
Reviewed-by: jnimeh, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Summary: Field arithmetic library for crypto algorithms like Poly1305 and X25519
Reviewed-by: xuelei, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Summary: Minor code/comment improvements
Reviewed-by: xuelei

Summary: Make some field arithmetic operations for X25519/X448 more resilient against side-channel attacks
Reviewed-by: ascarpino

Summary: Change SSLSessionContext.getSessionCacheSize to return 20480 by default instead of 0.
Reviewed-by: jnimeh, mullan

Reviewed-by: andrew, shade, dfuchs

Reviewed-by: vinnie

Summary: Files were missed in the commit of the 8129988 backport
Reviewed-by: shade

Summary: Add a TrustStoreManager to manage trusted certs.
Reviewed-by: mullan

Reviewed-by: xuelei

Summary: Convert <code></code> ad <tt></tt> to {@code }, <xmp></xmp> to <pre>{@code }</pre>.
Reviewed-by: mullan

Summary: Add class CADistrustPolicy and distrust Symantec.
Reviewed-by: weijun

Summary: Terminate cipher lists with TLS_EMPTY_RENEGOTIATION_INFO_SCSV.
Reviewed-by: jnimeh, clanger

Reviewed-by: weijun, mullan, chegar

Reviewed-by: andrew

Summary: TLS v1.2 algorithms for key and MAC derivation added to SunPKCS11 crypto provider. 8210912 fix is included as part of this changeset.
Reviewed-by: valeriep

Reviewed-by: coffeys

8027781: New jarsigner timestamp warning is grammatically incorrect
8159805: sun/security/tools/jarsigner/warnings/NoTimestampTest.java fails after JDK-8027781
Reviewed-by: weijun, coffeys, mullan

Reviewed-by: weijun, igerasim

Reviewed-by: ascarpino, mschoene

Reviewed-by: coffeys

Reviewed-by: coffeys

8207775: Better management of CipherCore buffers
Reviewed-by: weijun, ascarpino

Reviewed-by: xuelei
Contributed-by: prasadarao.koppula@oracle.com, sean.coffey@oracle.com

Reviewed-by: xuelei
Contributed-by: prasadarao.koppula@oracle.com, sean.coffey@oracle.com

Reviewed-by: xuelei, wetmore

Summary: Ensure session is properly released in P11Signature class
Reviewed-by: valeriep
Contributed-by: NMartin Balao <mbalao@redhat.com>

Reviewed-by: coffeys

Reviewed-by: coffeys

Reviewed-by: coffeys

Reviewed-by: xuelei