org.spongycastle.jsse.provider.ProvDHConfigVerifier Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of bctls-jdk15on Show documentation

Spongy Castle is a package-rename (org.bouncycastle.* to org.spongycastle.*) of Bouncy Castle intended for the Android platform. Android unfortunately ships with a stripped-down version of Bouncy Castle, which prevents easy upgrades - Spongy Castle overcomes this and provides a full, up-to-date version of the Bouncy Castle cryptographic libs.

The newest version!

package org.spongycastle.jsse.provider;

import org.spongycastle.tls.DefaultTlsDHConfigVerifier;
import org.spongycastle.tls.crypto.TlsDHConfig;

class ProvDHConfigVerifier
    extends DefaultTlsDHConfigVerifier
{
    private static final int provMinimumPrimeBits = PropertyUtils.getIntegerSystemProperty("org.spongycastle.jsse.client.dh.minimumPrimeBits", 2048, 1024, 16384);
    private static final boolean provUnrestrictedGroups = PropertyUtils.getBooleanSystemProperty("org.spongycastle.jsse.client.dh.unrestrictedGroups", false);

    ProvDHConfigVerifier()
    {
        super(provMinimumPrimeBits);
    }

    @Override
    protected boolean checkGroup(TlsDHConfig dhConfig)
    {
        return provUnrestrictedGroups || super.checkGroup(dhConfig);
    }
}