Corda is an open source blockchain project, designed for business from the start. Only Corda allows you to build interoperable blockchain networks that transact in strict privacy. Corda's smart contract technology allows businesses to transact directly, with value.
Go to file
Shams Asari 0091807c2f ENT-11101: Fix all crypto issues introduced by Java 17 upgrade
The various crypto tests that were previously ignored have been re-enabled.

The abandoned i2p EdDSA library has been replaced with native support that was added in Java 15.

Java 17 (via the `SunEC` provider) does not support the secp256k1 curve (one of the two ECDSA curves supported in Corda). This would not normally have been an issue as secp256k1 is already taken care of by Bouncy Castle. However, this only works if the `Crypto` API is used or if `”BC”` is explicitly specified as the provider (e.g. `Signature.getInstance(“SHA256withECDSA”, “BC”)`). If no provider is specified, which is what is more common, and actually what the Java docs recommend, then this doesn’t work as the `SunEC` provider is selected. To resolve this, a custom provider was created, installed just in front of `SunEC`, which “augments” `SunEC` by delegating to Bouncy Castle if keys or parameters for secp256k1 are encountered.

`X509Utilities.createCertificate` now calls `X509Certificate.verify()` to verify the created certificate, rather than using the Bouncy Castle API. This is more representative of how certificates will be verified (e.g. during SSL handshake) and weeds out other issues (such as unsupported curve error for secp256k1).

`BCCryptoService` has been renamed to `DefaultCryptoService` as it no longer explicitly uses Bouncy Castle but rather uses the installed security providers. This was done to fix a failing test. Further, `BCCryptoService` was already relying on the installed providers in some places.

The hack to get Corda `SecureRandom` working was also resolved. Also, as an added bonus, tests which ignored `SPHINCS256_SHA256` have been reinstated.

Note, there is a slightly inconsistency between how EdDSA and ECDSA keys are handled (and also RSA). For the later, Bouncy Castle is preferred, and methods such as `toSupportedKey*` will convert any JDK class to Bouncy Castle. For EdDSA the preference is the JDK (`SunEC`). However, this is simply a continuation of the previous preference of the i2p library over Bouncy Castle.
2024-03-04 13:29:49 +00:00
.ci ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
.github DOC-6353 - updated readme, fixed links and removed out of date info (#7676) 2024-02-22 15:45:36 +00:00
.idea ENT-6947 Intern common types to reduce heap footprint (#7239) 2022-10-18 09:28:41 +01:00
buildSrc ENT-11056: Compile the external verifier using Kotlin 1.2 (#7622) 2024-01-02 17:02:20 +00:00
client ENT-11502: Upgrade platform version to 140. (#7674) 2024-03-04 12:24:15 +00:00
common ENT-11351 - Compiler warnings pass 2 (#7655) 2024-01-23 10:19:03 +00:00
confidential-identities ENT-11056: Compile the external verifier using Kotlin 1.2 (#7622) 2024-01-02 17:02:20 +00:00
config Upgrade to gradle 7.6, kotlin 1.8 and jdk 17 2023-11-06 10:24:17 +00:00
core ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
core-1.2 ENT-11351 - Compiler warnings pass 5 (#7666) 2024-01-30 18:09:55 +00:00
core-tests ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
detekt-plugins Upgrade to gradle 7.6, kotlin 1.8 and jdk 17 2023-11-06 10:24:17 +00:00
docker ENT-11065: Remove the need for JVM flags in client code (#7635) 2024-01-03 11:22:03 +00:00
docs Added explicit publishing configuration for projects bundled as jars, this change was required when upgrading to kotlin 1.9.0 2023-11-08 10:48:10 +00:00
experimental ENT-11351 - Compiler warnings pass 4 (#7663) 2024-01-29 13:49:00 +00:00
finance ENT-11355: Backwards compatibility with older nodes via new attachments component group 2024-02-19 17:19:49 +00:00
gradle/wrapper Upgrade to gradle 7.6, kotlin 1.8 and jdk 17 2023-11-06 10:24:17 +00:00
isolated Upgrade to gradle 7.6, kotlin 1.8 and jdk 17 2023-11-06 10:24:17 +00:00
node ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
node-api ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
node-api-tests ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
opentelemetry ENT-11271 Publish dependencies in the maven pom.xml 2023-12-12 13:24:15 +00:00
release-tools CORDA-3017 - Fix release tooling when product name != jira project (#5229) 2019-06-21 09:28:07 +01:00
samples ENT-11351 - Compiler warnings pass 2 (#7655) 2024-01-23 10:19:03 +00:00
serialization ENT-11351 - Compiler warnings pass 5 (#7666) 2024-01-30 18:09:55 +00:00
serialization-1.2 ENT-11056: Turn off javadoc for serialisation-1.2 module 2024-01-03 12:41:04 +00:00
serialization-tests ENT-11355: Cleanup of TransactionBuilder and CorDapp loading 2024-02-12 14:27:07 +00:00
testing ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
tools ENT-11351 - Compiler warnings pass 3 (#7659) 2024-01-25 10:18:58 +00:00
verifier ENT-11355: Backwards compatibility with older nodes via new attachments component group 2024-02-19 17:19:49 +00:00
.dockerignore WIP Kubenetes parallel build (#5396) 2019-09-03 15:40:08 +00:00
.gitignore INFRA-505: Move integration tests to unit tests (#6530) 2020-08-06 15:16:27 +01:00
.snyk Merge branch 'release/os/4.9' into shams-4.10-merge-e6a80822 2023-07-13 10:53:30 +01:00
build.gradle ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
BUILD.md add a shared memory port allocator to allow multiple processes to sha… (#5223) 2019-07-02 18:38:33 +00:00
buildCacheSettings.gradle Re-add build cache configuration. 2023-12-19 09:20:31 +00:00
constants.properties ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
CONTRIBUTING.md LEDG-67 updating contrib links (#7036) 2022-02-14 10:09:36 +00:00
CONTRIBUTORS.md EG-4168 Updating contributors.md list for OS 4.7 release branch (#6782) 2020-10-22 22:52:11 +01:00
detekt-baseline-config.yml TM-45 Make detektBaseline pass (#5561) 2019-10-15 15:49:31 +01:00
detekt-baseline.xml ENT-11101: Fix all crypto issues introduced by Java 17 upgrade 2024-03-04 13:29:49 +00:00
detekt-config.yml ENT-11263: Remove TooGenericExceptionCaught detekt rule 2023-12-07 13:36:21 +00:00
gradle.properties ENT-11251: Upgrade to Kotlin language version 1.9 (#7660) 2024-01-25 13:51:19 +00:00
gradlew Upgrade to gradle 7.6, kotlin 1.8 and jdk 17 2023-11-06 10:24:17 +00:00
gradlew.bat Upgrade to gradle 7.6, kotlin 1.8 and jdk 17 2023-11-06 10:24:17 +00:00
Jenkinsfile ENT-11255: Scan attachments to determine if they are Kotlin 1.2 or later 2024-01-22 11:31:51 +00:00
LICENSE Use full Apache 2.0 license so GitHub recognizes it 2019-08-23 12:24:37 +02:00
README.md DOC-6353 - updated readme, fixed links and removed out of date info (#7676) 2024-02-22 15:45:36 +00:00
SECURITY.md CORDA-2958 Security policy for corda 2019-06-03 10:38:13 +02:00
settings.gradle ENT-11255: Scan attachments to determine if they are Kotlin 1.2 or later 2024-01-22 11:31:51 +00:00
sizing.sh add a shared memory port allocator to allow multiple processes to sha… (#5223) 2019-07-02 18:38:33 +00:00
TRADEMARK Updated URL link to R3 trademark policy 2017-07-13 11:43:41 +01:00

Corda

License

Corda

Corda is an open source blockchain project, designed for business from the start. Only Corda allows you to build interoperable blockchain networks that transact in strict privacy. Corda's smart contract technology allows businesses to transact directly, with value.

Architecture Evolution

The code present in this repository reflects the first version of the implementation of the Corda model for DLT technology. This first architecture version covers Corda versions 1 through 4 and continues to deliver on the promise of DLT for both the open source community and industry as a whole.

However, like all things, Corda must evolve to serve the more stringent needs of today. This is why the second (and current) version of the Corda Architecture can be found here and will form the basis of the Corda 5 release.

Features

  • Smart contracts that can be written in Java and other JVM languages
  • Flow framework to manage communication and negotiation between participants
  • Peer-to-peer network of nodes
  • "Notary" infrastructure to validate uniqueness and sequencing of transactions without global broadcast
  • Enables the development and deployment of distributed apps called CorDapps
  • Written in Kotlin, targeting the JVM

Getting started

  1. Read the Getting Started documentation
  2. Run the Example CorDapp
  3. Read about Corda's Key Concepts
  4. Follow the Hello, World! tutorial

Contributing

Corda is an open-source project and contributions are welcome!

To find out how to contribute, please see our contributing docs.

License

Apache 2.0

Acknowledgements

YourKit

YourKit supports open source projects with its full-featured Java Profiler.

YourKit, LLC is the creator of YourKit Java Profiler and YourKit .NET Profiler, innovative and intelligent tools for profiling Java and .NET applications.