cryptix-users — Cryptix User Group

Re: [Cryptix-users] Cryptix versions

[<Gre...@ri...>]

Viet,

I have seen this error also when a supplier changed their backend to BC. 
Before this we had no issues, since they have changed back to the original 
comercial package they were using (do not know the name) and we have had 
no problems.  I guess if you use criptix to encrypt/decript you should be 
OK as we have a 100% success rate.  When mixing with BC these errors 
occur.  I did try to trace the error but I could not fix it reliably.

Read tried past end of inputstream


Cheers Greg





"Viet H. Phan" <hoa...@ya...> 
01/05/2009 10:56
Please respond to
hoa...@ya...


To
cry...@li...
cc

Subject
Re: [Cryptix-users] Cryptix versions







Thanks for your response, Greg,

I have tried some testings with the Cryptix OpenPGP downloaded from 
http://www.cryptix.org/ (cryptix-openpgp-20050418-snap and 
cryptix-jce-20050328-snap) as follows:
1) I encrypted a file using BC 1.43. That file was decrypted by GnuPG 
1.4.9 (http://www.gnupg.org/) successfully, but Cryptix couldn't have 
decrypted the file with the error: 
IO error.
java.io.IOException: Error reading packet type: java.io.IOException: Fatal 
data format exception: Read tried past end of inputstream.
 at 
cryptix.openpgp.provider.PGPDecodedMessageInputStream.engineInit(PGPDecodedMessageInputStream.java:107)
 at 
cryptix.message.stream.DecodedMessageInputStream.init(DecodedMessageInputStream.java:143)
 at 
cryptix.openpgp.examples.StreamDecryptVerify.run(StreamDecryptVerify.java:122)
 at 
cryptix.openpgp.examples.StreamDecryptVerify.main(StreamDecryptVerify.java:58) 

2) I encrypted another file using BC 1.43. This file was also decrypted 
successfully by GnuPG 1.4.9. Cryptix was also able to decrypt it, but it 
throwed an error message:
Streaming the message failed.
cryptix.message.stream.MessageStreamException: End of stream reached, 
expecting signature.
 at 
cryptix.openpgp.provider.PGPDecodedMessageInputStream$SignedLiteralInputStream.verify(PGPDecodedMessageInputStream.java:745)
 at 
cryptix.openpgp.provider.PGPDecodedMessageInputStream.engineClose(PGPDecodedMessageInputStream.java:527)
 at 
cryptix.message.stream.DecodedMessageInputStream.close(DecodedMessageInputStream.java:161)
 at 
cryptix.openpgp.examples.StreamDecryptVerify.run(StreamDecryptVerify.java:132)
 at 
cryptix.openpgp.examples.StreamDecryptVerify.main(StreamDecryptVerify.java:58

This error message was unreasonable because I didn't sign the file.
That's why I said Cryptix looks unreliable. I have heard something that 
the development team has stopped maintaining the software ...

Regards,
Viet


--- On Fri, 5/1/09, Gre...@ri... <Gre...@ri...> wrote:
From: Gre...@ri... <Gre...@ri...>
Subject: Re: [Cryptix-users] Cryptix versions
To: hoa...@ya...
Date: Friday, May 1, 2009, 3:55 PM


Hello,

I am not sure whether this software is being maintained anymore, but we 
have sound it very reliable compared to BC.



Cheers Greg





"Viet H. Phan" <hoa...@ya...> 
01/05/2009 03:21

Please respond to
hoa...@ya...



To
cry...@li...
cc

Subject
[Cryptix-users] Cryptix versions









Hi All,

Could you tell me what the latest Cryptix release is and whether the 
development team still support it? I searched the Internet and found two 
locations:
http://www.cryptix.org/
http://www.ntua.gr/cryptix/products/index.html
They are too old, so they looks unreliable enough to use in production 
environments.
Please let me know if there are any newer Cryptix releases.

Thanks in advance,
Viet

------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. 
http://p.sf.net/sfu/velocityconf_______________________________________________

Cryptix-Users mailing list
Cry...@li...
https://lists.sourceforge.net/lists/listinfo/cryptix-users


Share our environment commitment - conserve resources and contribute to 
the reduction of CO2 emissions by not printing the email unless absolutely 
necessary to do so.

Any opinions expressed are those of the author, not Ricoh UK Ltd. This 
communication does not constitute either offer or acceptance of any 
contractually binding agreement. Such offer or acceptance must be 
communicated in writing. It is the responsibility of the recipient to 
ensure this email and attachments are free from computer viruses before 
use and the sender accepts no responsibility or liability for any such 
computer viruses.

Ricoh UK Ltd. may monitor the content of emails sent and received via its 
network for the purpose of ensuring compliance with its policies and 
procedures. This communication contains information, which may be 
confidential or privileged. The information is intended solely for the use 
of the individual or entity named above. If you are not the intended 
recipient, be aware that any disclosure, copying, distribution or use of 
the contents of this information is prohibited. If you have received this 
communication in error, please notify the sender immediately by return 
email with a copy to pos...@ri.... Please contact us on +44 (0) 
208 261 4000 if you need assistance.

Registered in England No: 473236
VAT No: GB524161280 
------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
_______________________________________________
Cryptix-Users mailing list
Cry...@li...
https://lists.sourceforge.net/lists/listinfo/cryptix-users




Share our environment commitment - conserve resources and contribute to the reduction of CO2 emissions by not printing the email unless absolutely necessary to do so. 

Any opinions expressed are those of the author, not Ricoh UK Ltd. This communication does not constitute either offer or acceptance of any contractually binding agreement. Such offer or acceptance must be communicated in writing. It is the responsibility of the recipient to ensure this email and attachments are free from computer viruses before use and the sender accepts no responsibility or liability for any such computer viruses. 

Ricoh UK Ltd. may monitor the content of emails sent and received via its network for the purpose of ensuring compliance with its policies and procedures. This communication contains information, which may be confidential or privileged. The information is intended solely for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this communication in error, please notify the sender immediately by return email with a copy to  pos...@ri... . Please contact us on +44 (0) 208 261 4000 if you need assistance. 

Registered in England No: 473236 
VAT No: GB524161280  

Re: [Cryptix-users] Cryptix versions

[Viet H. P. <hoa...@ya...>]

Thanks for your response, Greg,

I have tried some testings with the Cryptix OpenPGP downloaded from http://www.cryptix.org/ (cryptix-openpgp-20050418-snap and cryptix-jce-20050328-snap) as follows:
1) I encrypted a file using BC 1.43. That file was decrypted by GnuPG 1.4.9 (http://www.gnupg.org/) successfully, but Cryptix couldn't have decrypted the file with the error: 
IO error.
java.io.IOException: Error reading packet type: java.io.IOException: Fatal data format exception: Read tried past end of inputstream.
 at cryptix.openpgp.provider.PGPDecodedMessageInputStream.engineInit(PGPDecodedMessageInputStream.java:107)
 at cryptix.message.stream.DecodedMessageInputStream.init(DecodedMessageInputStream.java:143)
 at cryptix.openpgp.examples.StreamDecryptVerify.run(StreamDecryptVerify.java:122)
 at cryptix.openpgp.examples.StreamDecryptVerify.main(StreamDecryptVerify.java:58) 
2) I encrypted another file using BC 1.43. This file was also decrypted successfully by GnuPG 1.4.9. Cryptix was also able to decrypt it, but it throwed an error message:
Streaming the message failed.
cryptix.message.stream.MessageStreamException: End of stream reached, expecting signature.
 at cryptix.openpgp.provider.PGPDecodedMessageInputStream$SignedLiteralInputStream.verify(PGPDecodedMessageInputStream.java:745)
 at cryptix.openpgp.provider.PGPDecodedMessageInputStream.engineClose(PGPDecodedMessageInputStream.java:527)
 at cryptix.message.stream.DecodedMessageInputStream.close(DecodedMessageInputStream.java:161)
 at cryptix.openpgp.examples.StreamDecryptVerify.run(StreamDecryptVerify.java:132)
 at cryptix.openpgp.examples.StreamDecryptVerify.main(StreamDecryptVerify.java:58
This error message was unreasonable because I didn't sign the file.
That's why I said Cryptix looks unreliable. I have heard something that the development team has stopped maintaining the software ...

Regards,
Viet


--- On Fri, 5/1/09, Gre...@ri... <Gre...@ri...> wrote:
From: Gre...@ri... <Gre...@ri...>
Subject: Re: [Cryptix-users] Cryptix versions
To: hoa...@ya...
Date: Friday, May 1, 2009, 3:55 PM



Hello,

I am not sure whether this software
is being maintained anymore, but we have sound it very reliable compared
to BC.



Cheers Greg




"Viet H. Phan"
<hoa...@ya...> 01/05/2009 03:21Please respond to
hoa...@ya...
Toc...@li...cc
Subject[Cryptix-users] Cryptix versions






Hi All,

Could you tell me what the latest Cryptix release is and whether the development
team still support it? I searched the Internet and found two locations:
http://www.cryptix.org/
http://www.ntua.gr/cryptix/products/index.html
They are too old, so they looks unreliable enough to use in production
environments.
Please let me know if there are any newer Cryptix releases.

Thanks in advance,
Viet
------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations

Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf

and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf_______________________________________________
Cryptix-Users mailing list
Cry...@li...
https://lists.sourceforge.net/lists/listinfo/cryptix-users


Share our environment commitment - conserve resources and contribute to the reduction of CO2 emissions by not printing the email unless absolutely necessary to do so.

Any opinions expressed are those of the author, not Ricoh UK Ltd. This communication does not constitute either offer or acceptance of any contractually binding agreement. Such offer or acceptance must be communicated in writing. It is the responsibility of the recipient to ensure this email and attachments are free from computer viruses before use and the sender accepts no responsibility or liability for any such computer viruses.

Ricoh UK Ltd. may monitor the content of emails sent and received via its network for the purpose of ensuring compliance with its policies and procedures. This communication contains information, which may be confidential or privileged. The information is intended solely for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this communication in error, please notify the sender immediately by return email with a copy to pos...@ri.... Please contact us on +44 (0) 208 261 4000 if you need assistance.

Registered in England No: 473236
VAT No: GB524161280 


      

[Cryptix-users] Cryptix versions

[Viet H. P. <hoa...@ya...>]

Hi All,

Could you tell me what the latest Cryptix release is and whether the development team still support it? I searched the Internet and found two locations:
http://www.cryptix.org/
http://www.ntua.gr/cryptix/products/index.html
They are too old, so they looks unreliable enough to use in production environments.
Please let me know if there are any newer Cryptix releases.

Thanks in advance,
Viet



      

[Cryptix-users] CollegeBoard Online - IDEA Cipher

[noreen <nor...@gm...>]

Hi Users!

I am trying to generate a key with the following specifications: Type: RSA/RSA Legacy  Size: 1024 Cipher: IDEA using any java cryptix class.

Apparently the Cipher IDEA is patented. Therefore it is not available with freeware cryptix packages.

Has anyone worked on encrypting and decrypting CollegeBoard SAT scores? Where and how did you buy the IDEA cipher from?

Thank you!
Noreen
 

Excerpts of correspondence with CollegeBoard

If they can get a version of the freeware we can try it to see if we can use it.  As long as an encryption key is compatible with our system, it will work.  To be compatible a key needs have the following specifications: Type: RSA/RSA Legacy  Size: 1024 Cipher: IDEA.  If you can download the freeware and create this key we will be able to use it.

If you do send us a key, please include all of the contact information.  We need name of the school, code number, contact name, email and phone number for a primary and secondary contact.  Once we have a compatible key, we will send a test file.

The schools that are affiliated with affiliated schools, usually have the contact in the states order the software for them.  We recommend the PGP professional desktop for 83.00 US dollars a year.  It is not necessary 

[Cryptix-users] java.security.NoSuchAlgorithmException: MessageDigest SHA-1 implementation not found

[Nunna, S. <Sul...@an...>]

 
Hi,
Below is the code am trying to execute and following that is the output
of the same. 

I have added Cyrptix32.jar to my classpath and also added the Cryptix
provider to the java.security file.

----------------------------CODE ---------------------------------

for(Provider provider:Security.getProviders())
{
 System.out.println(provider.getName());    
}
MessageDigest msgD = MessageDigest.getInstance("SHA-1", "Cryptix");

-------------------------- OUTPUT ----------------------------------

IBMJSSE2
IBMJCE
IBMJGSSProvider
IBMCertPath
IBMSASL
IBMXMLCRYPTO
IBMXMLEnc
IBMSPNEGO
Cryptix

java.security.NoSuchAlgorithmException: MessageDigest SHA-1
implementation not found
 at org.apache.harmony.security.fortress.Engine.getInstance(Unknown
Source)
 at java.security.MessageDigest.getInstance(Unknown Source)
 at java.security.MessageDigest.getInstance(Unknown Source)
 at SymphonyAPIManager.main(SymphonyAPIManager.java:64)

------------------------------------------------------------------------
--------------------

Is there some thing i am missing here .Please HELP.I am a beginner with
Crypto.Any help is appreciated.

 

Thank you,

su



CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, 
is for the sole use of the intended recipient(s) and may contain confidential
and privileged information or otherwise protected by law.  Any unauthorized
review, use, disclosure or distribution is prohibited.  If you are not the
intended recipient, please contact the sender by reply e-mail and destroy
all copies of the original message.

Re: [Cryptix-users] PKCS #7 Cryptix error:

[Manoj S. <man...@te...>]

I have already Installed and Cryptix-OpenPGP and JCE and added in CLASSPATH....but after all these things facing the same problem....

Can you pls send me the link from where I can install IBM versions and manuals?


Thanks

Manoj

--- On Tue, 4/21/09, And...@hc... <And...@hc...> wrote:

> From: And...@hc... <And...@hc...>
> Subject: Re: [Cryptix-users] PKCS #7 Cryptix error:
> To: "Manoj Samtani" <man...@te...>
> Cc: cry...@li...
> Date: Tuesday, April 21, 2009, 6:03 AM
> 
> 
> Hello-
> 
> 
> 
> I found that I had to switch to IBM versions of the
> local_policy.jar and
> the us_export_policy.jar for my encryption to work. The
> providers should
> all be listed out in java.security file.
> 
> 
> 
> Best of luck,
> 
> 
> 
> 
> 
> Andrew Maddox,
> 
> Ext. #2089
> 
> 
> 
> 
> 
> 
> 
> 
> "Manoj Samtani"
> <man...@te...> 
> 04/21/2009 06:25
> AM
> 
> 
> 
> 
> To
> cry...@li...
> 
> 
> cc
> 
> 
> 
> Subject
> [Cryptix-users] PKCS #7 Cryptix
> error:
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Hi,
> 
> 
> 
> 
> 
> 
> 
> While configuring payment gateway we should have encrypted
> information
> to be passed between our servers, for that we have
> configure Apache+PHP+Tomcat
> (Back end)+ MySQL+ PHP-JavaBridge+JDK1.5
> 
> 
> 
> but I am getting the following error while running the code
> can anyone
> help me?
> 
> 
> 
> <Exception in encrypting data. algorithm PKCS7 is not
> available from
> provider Cryptix><TxnNo-->1>
> 
> 
> 
> 
> 
> and following error in browser:
> 
> 
> 
> Response Code:2
> 
> Response Message:Error while encrypting data. Transaction
> cannot be processed.
> 
> 
> 
> 
> 
> 
> 
> Waiting for valuable response.
> 
> 
> 
> 
> 
> Regards
> 
> 
> 
> Manoj
> 
> 
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> 
> Stay on top of everything new and different, both inside
> and 
> 
> around Java (TM) technology - register by April 22, and
> save
> 
> $200 on the JavaOne (SM) conference, June 2-5, 2009, San
> Francisco.
> 
> 300 plus technical and hands-on sessions. Register today. 
> 
> Use priority code J9JMT32. http://p.sf.net/sfu/p
> 
> _______________________________________________
> 
> Cryptix-Users mailing list
> 
> Cry...@li...
> 
> https://lists.sourceforge.net/lists/listinfo/cryptix-users
> 
> 
> 
> 
> 
> 
> 
> **********
> 
> The information contained in this communication is
> confidential, private, proprietary, or otherwise privileged
> and is intended only for the use of the addressee. 
> Unauthorized use, disclosure, distribution or copying is
> strictly prohibited and may be unlawful.  If you have
> received this communication in error, please notify the
> sender immediately at (312)653-6000 in Illinois;
> (800)835-8699 in New Mexico; (918)560-3500 in Oklahoma; or
> (972)766-6900 in Texas.
> 
> **********
> 

Re: [Cryptix-users] PKCS #7 Cryptix error:

[<And...@hc...>]

Hello-

I found that I had to switch to IBM versions of the local_policy.jar and 
the us_export_policy.jar for my encryption to work. The providers should 
all be listed out in java.security file.

Best of luck,


Andrew Maddox,
Ext. #2089



"Manoj Samtani" <man...@te...> 
04/21/2009 06:25 AM

To
cry...@li...
cc

Subject
[Cryptix-users] PKCS #7 Cryptix error:







Hi,



While configuring payment gateway we should have encrypted information to 
be passed between our servers, for that we have configure 
Apache+PHP+Tomcat (Back end)+ MySQL+ PHP-JavaBridge+JDK1.5

but I am getting the following error while running the code can anyone 
help me?

<Exception in encrypting data. algorithm PKCS7 is not available from 
provider Cryptix><TxnNo-->1>


and following error in browser:

Response Code:2
Response Message:Error while encrypting data. Transaction cannot be 
processed.



Waiting for valuable response.


Regards

Manoj



------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Cryptix-Users mailing list
Cry...@li...
https://lists.sourceforge.net/lists/listinfo/cryptix-users




**********

The information contained in this communication is confidential, private, proprietary, or otherwise privileged and is intended only for the use of the addressee.  Unauthorized use, disclosure, distribution or copying is strictly prohibited and may be unlawful.  If you have received this communication in error, please notify the sender immediately at (312)653-6000 in Illinois; (800)835-8699 in New Mexico; (918)560-3500 in Oklahoma; or (972)766-6900 in Texas.

**********

[Cryptix-users] PKCS #7 Cryptix error:

[Manoj S. <man...@te...>]

Hi,



While configuring payment gateway we should have encrypted information to be passed between our servers, for that we have configure Apache+PHP+Tomcat (Back end)+ MySQL+ PHP-JavaBridge+JDK1.5

but I am getting the following error while running the code can anyone help me?

<Exception in encrypting data. algorithm PKCS7 is not available from provider Cryptix><TxnNo-->1>


and following error in browser:

Response Code:2
Response Message:Error while encrypting data. Transaction cannot be processed.



Waiting for valuable response.


Regards

Manoj

[Cryptix-users] help

[suresh r. <sur...@gm...>]

hi
I am sufferring with creating keyrings and load the keys from keyrings
any body can suggest with working code?
Thanks in advance

Regards
Suresh

[Cryptix-users] Decryption and ecryption using PGP 6

[Surendra N. D. <sur...@gm...>]

Hi,

We have been using PGP 5 since a long time and have to migrate to PGP 6 now.
Where do I get the latest cryptix jar files?
What is the major difference between 5 and 6?

Thanks in advance.

Re: [Cryptix-users] Formal Proof

[Ian G <ia...@sy...>]

On 26/1/09 09:16, TO...@te... wrote:
> I don't know waht is the formal proof, but you can probe with
> Bouncy&Castle PGP library.


Probably, the original poster means "certification".  For libraries, 
there isn't so much formal proofs but certification under some programme 
or other like Common Criteria or FIPS.

The answer to this is "no" and it won't happen, nor is it recommended, 
for the safety and security of your users.


> I finally make my project whit this library (BC) and work fine.

Probably a good idea, Cryptix has been unsupported for years, I think 
BouncyCastle is supported though.


> Sorry my english.


ni problema :)

iang

Re: [Cryptix-users] Formal Proof

[<TO...@te...>]

I don't know waht is the formal proof, but you can probe with 
Bouncy&Castle PGP library.

I finally make my project whit this library (BC) and work fine.


Sorry my english.



----Mensaje original----
De: to...@kn...
Recibido: 23/01/2009 11:08
Para: <cry...@li...>
Asunto: Re: [Cryptix-users] Formal Proof

Hi,

there is no formal proof. Actually, if you require one, you should
prepare to spend a lot of $$$. An open source project will get you
nowhere with requirements like this.

Tobias

silviu andrica wrote:
> Hello everybody!
>   I am new to Cryptix and I plan on using it in a project. But, I 
can
> only use it if Cryptix has a formal proof of its correctness with
> respect to its Java source code. Also, if this is not the case, can
> someone, please, point me to
> a library/class that has such a formal proof?
> 
> Best regards,
>   Silviu


------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
Cryptix-Users mailing list
Cry...@li...
https://lists.sourceforge.net/lists/listinfo/cryptix-users





Ahora también puedes acceder a tu correo Terra desde el móvil.
Infórmate pinchando aquí.

Re: [Cryptix-users] Formal Proof

[Tobias S. <to...@kn...>]

Hi,

there is no formal proof. Actually, if you require one, you should
prepare to spend a lot of $$$. An open source project will get you
nowhere with requirements like this.

Tobias

silviu andrica wrote:
> Hello everybody!
>   I am new to Cryptix and I plan on using it in a project. But, I can
> only use it if Cryptix has a formal proof of its correctness with
> respect to its Java source code. Also, if this is not the case, can
> someone, please, point me to
> a library/class that has such a formal proof?
> 
> Best regards,
>   Silviu

[Cryptix-users] Formal Proof

[silviu a. <sil...@ya...>]

Hello everybody!
  I am new to Cryptix and I plan on using it in a project. But, I can only use it if Cryptix has a formal proof of its correctness with respect to its Java source code. Also, if this is not the case, can someone, please, point me to
a library/class that has such a formal proof?

Best regards,
  Silviu



      

[Cryptix-users] Cryptix 3.2 running weblogic 10.3 throwing "java.security.NoSuchAlgorithmException" exception

[Sahoo, S. <San...@at...>]

Hi,

 

In our project we are using cryptix 3.2 , it was working fine
previously, Now we changed our environment to weblogic 10.3(initially it
was running weblogic 8.1) which is based on java 1.6. Now while
configuring the whole thing , it is throwing following exception
"java.security.NoSuchAlgorithmException: no such algorithm: MD5 for
provider Cryptix".  The whole exception description as below. Hoping
earliest  cooperation.

 

 

 

Tue Jan 20 08:43:51 IST 2009: DEB #[ACTIVE] : '0' for queue:
'weblogic.kernel.Default (self-tuning)'# nsn #6

Tue Jan 20 08:43:51 IST 2009: DEB #[ACTIVE] : '0' for queue:
'weblogic.kernel.Default (self-tuning)'# nsn #7

Tue Jan 20 08:43:51 IST 2009: DEB #[ACTIVE] : '0' for queue:
'weblogic.kernel.Default (self-tuning)'# Is logged ? : false

Tue Jan 20 08:43:51 IST 2009: ERR #[ACTIVE] : '0' for queue:
'weblogic.kernel.Default (self-tuning)'#
java.security.NoSuchAlgorithmException: no such algorithm: MD5 for
provider Cryptix

        at sun.security.jca.GetInstance.getService(GetInstance.java:70)

        at
sun.security.jca.GetInstance.getInstance(GetInstance.java:190)

        at java.security.Security.getImpl(Security.java:662)

        at
java.security.MessageDigest.getInstance(MessageDigest.java:185)

        at
com.sgs.common.framework.security.CryptUtilities.crypt(CryptUtilities.ja
va:50)

        at
com.sgs.common.account.LoginServlet.processRequest(LoginServlet.java:147
)

        at
com.sgs.v2.common.account.V2StaffLoginServlet.processRequest(V2StaffLogi
nServlet.java:174)

        at
com.sgs.common.framework.servlet.EPlatformServlet.doPost(EPlatformServle
t.java:208)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)

        at
weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(St
ubSecurityHelper.java:227)

        at
weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityH
elper.java:125)

        at
weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:2
92)

        at
weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:1
75)

        at
weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.r
un(WebAppServletContext.java:3498)

        at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSu
bject.java:321)

        at weblogic.security.service.SecurityManager.runAs(Unknown
Source)

        at
weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServ
letContext.java:2180)

        at
weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletCont
ext.java:2086)

        at
weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java
:1406)

        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)

        at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

 

<Jan 20, 2009 8:43:51 AM IST> <Error> <t3://156.150.105.59:7001>
<BEA-000000> <

Tue Jan 20 08:43:51 IST 2009: ERR #[ACTIVE] : '0' for queue:
'weblogic.kernel.Default (self-tuning)'#
java.security.NoSuchAlgorithmException: no such algorithm: MD5 for
provider Cryptix

        at sun.security.jca.GetInstance.getService(GetInstance.java:70)

        at
sun.security.jca.GetInstance.getInstance(GetInstance.java:190)

        at java.security.Security.getImpl(Security.java:662)

        at
java.security.MessageDigest.getInstance(MessageDigest.java:185)

        at
com.sgs.common.framework.security.CryptUtilities.crypt(CryptUtilities.ja
va:50)

        at
com.sgs.common.account.LoginServlet.processRequest(LoginServlet.java:147
)

        at
com.sgs.v2.common.account.V2StaffLoginServlet.processRequest(V2StaffLogi
nServlet.java:174)

        at
com.sgs.common.framework.servlet.EPlatformServlet.doPost(EPlatformServle
t.java:208)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)

        at
weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(St
ubSecurityHelper.java:227)

        at
weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityH
elper.java:125)

        at
weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:2
92)

        at
weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:1
75)

        at
weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.r
un(WebAppServletContext.java:3498)

        at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSu
bject.java:321)

        at weblogic.security.service.SecurityManager.runAs(Unknown
Source)

        at
weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServ
letContext.java:2180)

        at
weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletCont
ext.java:2086)

        at
weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java
:1406)

        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)

        at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

> 

Tue Jan 20 08:43:51 IST 2009: DEB #[ACTIVE] : '0' for queue:
'weblogic.kernel.Default (self-tuning)'# ***** Start Authentification...

Tue Jan 20 08:43:52 IST 2009: DEB #[ACTIVE] : '0' for queue:
'weblogic.kernel.Default (self-tuning)'# Start Authentification... done
FAILED

Tue Jan 20 08:43:52 IST 2009: ERR #[ACTIVE] : '0' for queue:
'weblogic.kernel.Default (self-tuning)'#
com.sgs.v2.common.account.V2StaffLoginServlet

Exception: Problem while trying to display an exception. Cause :Could
not open the Bundle file

 

Incorrect Password, wrong user ID or wrong account type

 

 

com.sgs.common.framework.servlet.UnauthorizedAccessException: Exception:
Problem while trying to display an exception. Cause :Could not open the
Bundle file

        at
com.sgs.common.account.LoginServlet.processRequest(LoginServlet.java:269
)

        at
com.sgs.v2.common.account.V2StaffLoginServlet.processRequest(V2StaffLogi
nServlet.java:174)

        at
com.sgs.common.framework.servlet.EPlatformServlet.doPost(EPlatformServle
t.java:208)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)

        at
weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(St
ubSecurityHelper.java:227)

        at
weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityH
elper.java:125)

        at
weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:2
92)

        at
weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:1
75)

        at
weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.r
un(WebAppServletContext.java:3498)

        at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSu
bject.java:321)

        at weblogic.security.service.SecurityManager.runAs(Unknown
Source)

        at
weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServ
letContext.java:2180)

        at
weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletCont
ext.java:2086)

        at
weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java
:1406)

        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)

        at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

 

<Jan 20, 2009 8:43:52 AM IST> <Error> <t3://156.150.105.59:7001>
<BEA-000000> <

Tue Jan 20 08:43:52 IST 2009: ERR #[ACTIVE] : '0' for queue:
'weblogic.kernel.Default (self-tuning)'#
com.sgs.v2.common.account.V2StaffLoginServlet

Exception: Problem while trying to display an exception. Cause :Could
not open the Bundle file

 

Incorrect Password, wrong user ID or wrong account type

 

 

[Cryptix-users] \r\n returned from MessageFactory

[Ingo V. <ing...@gm...>]

Hello,

I've a (understanding?-) problem with MessageFactory.

If I execute following Code, I don't get back the same String
as I assigned the variable "data". It alway append "\r\n" at the
end of the string. I tried to debug this and found, that  this appendix
comes from MessageFactory (mf.generateMessages(inp)).

The Stream "inp" that were passed to mf.generateMessages
does not contain this characters.

If I use the Collection co (commended out), I found there this appendix too.

The same Problem I get, if I use the Cryptix examples (GenerateAndWriteKey.java,
Encrypt.java, Decrypt.java) and a single lined string as TestString msg in
Encrypt.java

The Problem is, that that decrypted Message is not the original Message before
encryption..

I want hash and compare the message before and after ... but so I get never the
same hash.

If the "\r\n" is every time appanded, than I can remove it, but what,
when original message
ends with a new line .... Then its no second new line appended :-(

I also found the test AsciiLastLineTest.java, but it's not commended ...

Thanx for helping

Ingo


CODE:
###########################################
package MFTest;

import cryptix.message.MessageFactory;
import cryptix.message.LiteralMessage;
import java.io.InputStream;
import java.io.ByteArrayInputStream;

public class MFTest {

   public static void main(String[] args) {

       java.security.Security.addProvider(new
cryptix.openpgp.provider.CryptixOpenPGP());
       String data = "AAAAAAAA";

       try {
           MessageFactory mf = MessageFactory.getInstance("OpenPGP");
           InputStream inp = new ByteArrayInputStream(data.getBytes("UTF-8"));
           //Collection co = mf.generateMessages(inp);
           LiteralMessage msg = (LiteralMessage)
mf.generateMessages(inp).iterator().next();
           System.out.println(":" + data + ":");
           System.out.println(":" + msg.getTextData() + ":");
       } catch (Exception e) {
           System.out.println(e.toString());
       }
   }
}
###########################################

OUTPUT:

:AAAAAAAA:
:AAAAAAAA
:


##########################################

[Cryptix-users] Intermittent failure in decrypting a file

[Erica L. <yl...@su...>]

I have generated the key pair (1024-bit RSA key) using the KeyBundle API
and exported the public key to different users. The user imports the key
to their key server and encrypts files using pgp commands.  Sometimes I
can decrypt the files sometimes I can't with various exceptions listed
below:

1. cryptix.message.MessageException:
cryptix.openpgp.PGPFatalDataFormatException: Invalid packet type.

            at
cryptix.openpgp.provider.PGPMessageFactory.generateBinary(PGPMessageFact
ory.java:209)

            at
cryptix.openpgp.provider.PGPMessageFactory.engineGenerateMessages(PGPMes
sageFactory.java:76)

            at
cryptix.message.MessageFactory.generateMessages(MessageFactory.java:142)

 

cryptix.message.MessageException:
cryptix.openpgp.PGPFatalDataFormatException: Read tried past end of
inputstream.

            at
cryptix.openpgp.provider.PGPMessageFactory.generateBinary(PGPMessageFact
ory.java:209)

            at
cryptix.openpgp.provider.PGPMessageFactory.engineGenerateMessages(PGPMes
sageFactory.java:76)

            at
cryptix.message.MessageFactory.generateMessages(MessageFactory.java:142)

 

My environment:

Cryptix OpenPGP and JCE from year 2005

JDK 1.5 

Window XP and Solaris 

 

Anyone can provide some info will be a great help. Thanks!

 

 

 

 




The information contained in this message may be legally privileged and confidential.  It is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited.  If you have received this message in error, please immediately notify the sender and/or SuccessFactors, Inc. by telephone at (650) 645-2000 and delete or destroy any copy of this message.

Re: [Cryptix-users] RSA keys that use the IDEA cipher

[Ian G <ia...@sy...>]

noreen wrote:
> 
> Do RSA legacy keys always use key type RSA and the IDEA cipher? How do 
> you create an RSA key with cipher=IDEA?

PGP 2.6 and before were RSA+IDEA only.  in PGP5.0, variations were added 
to both axes, and IDEA was deprecated because it was a patented 
algorithm or somesuch, so most switched over to DSS+3DES or RSA+3DES.

However, this is only PGP 2.6, whereas below you have a format=x.509 key 
which is not PGP.


> I have included the code so far with the error that was generated:
> 
> //create an RSA key
> KeyPairGenerator keyPairGen = KeyPairGenerator.getInstance( "RSA" );
> this.cipher = Cipher.getInstance("RSA");
> keyPairGen.initialize( 1024 );
> 
> // use the key to initialize the idea cipher
> this.cipher = Cipher.getInstance("IDEA", "CryptixCrypto");
> cipher.init( Cipher.ENCRYPT_MODE, keyParirGen.getKeyPair.getPublic() );

Is that the right arguments?  I cannot recall what init does, but I 
imagine you have to provide it with a secret keyphrase of the right 
length, not the public key.

iang


> CODE OUTPUT
> cipher algorithm IDEA   BlockSize=8
> KeyPair Algorithm RSA
> Key AlgorithmRSA    format= X.509    serialVersionID=-8727434096241101194
> Invalid user key length
> java.security.InvalidKeyException: Invalid user key length
>         at cryptix.jce.provider.cipher.IDEA.makeKey(IDEA.java:156)

[Cryptix-users] RSA keys that use the IDEA cipher

[noreen <nor...@gm...>]

Do RSA legacy keys always use key type RSA and the IDEA cipher? How do 
you create an RSA key with cipher=IDEA?

I have included the code so far with the error that was generated:

//create an RSA key
KeyPairGenerator keyPairGen = KeyPairGenerator.getInstance( "RSA" );
this.cipher = Cipher.getInstance("RSA");
keyPairGen.initialize( 1024 );

// use the key to initialize the idea cipher
this.cipher = Cipher.getInstance("IDEA", "CryptixCrypto");
cipher.init( Cipher.ENCRYPT_MODE, keyParirGen.getKeyPair.getPublic() );


CODE OUTPUT
cipher algorithm IDEA   BlockSize=8
KeyPair Algorithm RSA
Key AlgorithmRSA    format= X.509    serialVersionID=-8727434096241101194
Invalid user key length
java.security.InvalidKeyException: Invalid user key length
        at cryptix.jce.provider.cipher.IDEA.makeKey(IDEA.java:156)
        at cryptix.jce.provider.cipher.IDEA.coreInit(IDEA.java:78)
        at cryptix.jce.provider.cipher.ModeECB.coreInit(ModeECB.java:53)
        at cryptix.jce.provider.cipher.Mode.init(Mode.java:115)
        at cryptix.jce.provider.cipher.Padding.init(Padding.java:154)
        at 
cryptix.jce.provider.cipher.BlockCipher.engineInit(BlockCipher.java:286)
        at 
cryptix.jce.provider.cipher.BlockCipher.engineInit(BlockCipher.java:271)
        at javax.crypto.Cipher.init(DashoA13*..)
        at javax.crypto.Cipher.init(DashoA13*..)
        at Crypt.<init>(Crypt.java:44)
        at Crypt.main(Crypt.java:84)

Re: [Cryptix-users] API optimizations

[Ian G <ia...@sy...>]

Sameer Vijaykar wrote:
> Hi,
> 
> I am an undergraduate student at the Indian Institute of Technology, 
> Bombay in India. I have undertaken a course on Cryptography and Network
> security for which I am performing a survey of some cryptography APIs 
> from the point of view of their performance and the incorporated 
> optimizations. During the survey, I have found that almost all the 
> cryptography APIs perform significantly better than a textbook 
> implementation in either Java or C++. I want to further explore the way 
> in which the algorithms are optimized in order to get a better 
> understanding of the observed results. The emphasis here is on 
> optimizations in the algorithm itself as well as the implementation thereof.
> 
> Although the most API websites provide a great deal of information 
> regarding the usage of the API, I could not find satisfactory 
> information regarding the development of any API as such. Could someone 
> please point me towards any references in this regard. I would gladly 
> appreciate any help or suggestions.


I recall Peter Gutmann has written a paper on the design of APIs for 
crypto toolkits.  Have a look on his site or email him.  I don't think 
it goes into optimisation though.

That's really the area of hard-core cryptoplumbers like Eric Young ... I 
don't think people so much write about it as muck around with code 
constructs, run the speed tests, and see if it works.

iang

PS: for other posters, it looks like Cryptix is unmaintained for now. 
Most people use Bouncy Castle.

[Cryptix-users] API optimizations

[Sameer V. <sa...@cs...>]

Hi,

I am an undergraduate student at the Indian Institute of Technology, 
Bombay in India. I have undertaken a course on Cryptography and Network
security for which I am performing a survey of some cryptography APIs 
from the point of view of their performance and the incorporated 
optimizations. During the survey, I have found that almost all the 
cryptography APIs perform significantly better than a textbook 
implementation in either Java or C++. I want to further explore the way 
in which the algorithms are optimized in order to get a better 
understanding of the observed results. The emphasis here is on 
optimizations in the algorithm itself as well as the implementation thereof.

Although the most API websites provide a great deal of information 
regarding the usage of the API, I could not find satisfactory 
information regarding the development of any API as such. Could someone 
please point me towards any references in this regard. I would gladly 
appreciate any help or suggestions.

Thank you.

Regards,
Sameer Vijaykar

[Cryptix-users] PBE and Blowfish

[Yves J. <yj...@ya...>]

Hello

I have an implementation question about the use of cryptix and javax.crypto in a java project.
My goal is  to retrieve from a password and salt, the key and IV.
The algo used is Blowfish CBC.

My code is something like that:

			char[] passPhrase = "abcd".toCharArray();	
			byte[] salt = {(byte)'1',(byte)'2',(byte)'3',(byte)'4',(byte)'5',(byte)'6',(byte)'7',(byte)'8'};
			
			javax.crypto.spec.PBEParameterSpec ps = new javax.crypto.spec.PBEParameterSpec(salt, 20);
			
			SecretKeyFactory kf = SecretKeyFactory.getInstance("Blowfish", "CryptixCrypto");
			Key bfKey = kf.generateSecret(new javax.crypto.spec.PBEKeySpec(passPhrase));
			Cipher c = Cipher.getInstance("Blowfish/CBC/PKCS5Padding", "CryptixCrypto");
			c.init(Cipher.ENCRYPT_MODE, bfKey, ps);
			
			System.out.println("IV=" + byteArrayToHexString(c.getIV()));
			System.out.println("key=" + byteArrayToHexString(bfKey.getEncoded()));

 
But give me an error for SecretKeyFactory.getInstance("Blowfish", "CryptixCrypto");
Cause "Blowfish" is not a valid secretKeyFactory.

PS: my java.security configuration is correct for cryptix.

What is the correct way to implement something like that?

Thanks for your help.
regards,
Yv.


      

[Cryptix-users] Read tried past end of inputstream.

[<Gre...@ri...>]

Hello,

If the pgp files are > 10KB we were having trouble decrypting messages 
with and error "Read tried past end of inputstream".  There were a couple 
of previous similar messages but none of any help. 

We are using the EncryptedMessage decrypt(..) method to extract the 
payload (as per examples).

eg:

msg = emsg.decrypt(bundle, passPhrase.toCharArray()); 

Looks like there is a mistake where it does not read the bytes correctly. 
The change below seems to address the problem. 

cryptix.openpgp.io.PGPLengthDataInputStream in the 
cryptix-openpgp-provider.jar

line #157 needs to be amended:

// } else if (chunkLength > chunkBytesRead) {
    } else if (chunkBytesRead <= chunkLength ) {

Now seems to work OK.

I think the change now reads upto but not the last byte, so the next read 
works as expected.  The < 10KB  files never got to this code as the read 
was done in one go.

Hope this helps.

Cheers Greg





Cheers Greg




Share our environment commitment - conserve resources and contribute to the reduction of CO2 emissions by not printing the email unless absolutely necessary to do so. 

Any opinions expressed are those of the author, not Ricoh UK Ltd. This communication does not constitute either offer or acceptance of any contractually binding agreement. Such offer or acceptance must be communicated in writing. It is the responsibility of the recipient to ensure this email and attachments are free from computer viruses before use and the sender accepts no responsibility or liability for any such computer viruses. 

Ricoh UK Ltd. may monitor the content of emails sent and received via its network for the purpose of ensuring compliance with its policies and procedures. This communication contains information, which may be confidential or privileged. The information is intended solely for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this communication in error, please notify the sender immediately by return email with a copy to  pos...@ri... . Please contact us on +44 (0) 208 261 4000 if you need assistance. 

Registered in England No: 1505381 
VAT No: GB 354 2816 54  

[Cryptix-users] sign PGP with X509, pfx, p12 or PKCS12 Certificate

[<TO...@te...>]

Hi!

I  need Sign document with PKCS12 Certificate and Crytix.

I had prove to cast privateKey of X509 certificate to PGPprivateKey but it's not possible.

Nobody have a idea about i can do??

Thanks and sorry my english.








Ahora también puedes acceder a tu correo Terra desde el móvil.

Infórmate pinchando aquí.

[Cryptix-users] PGP Encryption for excel files...

[Mehul V. <meh...@hi...>]

Hi All,

I am using cryptix api for encrypting and decrypting excel file (.xls)
Once I encrypt and decrypt a file, I get the same bytes in file (No data
loss).
But when I open a decrypted file, I can not see data properly. It displays
garbage data.

Thanks
Mehul.