cryptix-users — Cryptix User Group

Re: [Cryptix-users] Cryptix - Getting Started..

[Smith, C. <cs...@em...>]

Hi,
    I'm just getting started with using Cryptix. So, I was wondering if
someone could point me to some material online that could help me get a
kick start (tutorials, documentation, javadoc, etc.). Thanks for your
help!


		Hello and this website has many examples with their
downloads. http://www.cryptix.org/


=09

Corey R. Smith
Information Systems
System Analyst/Programmer
EMH Regional Healthcare System
Office: (440) 326-5228
Pager: (440) 758-6541
Cell:    (440) 315-4812
Fax:    (440) 329-7792
Visit our web site: http://www.emh-healthcare.org
=20
=20

CONFIDENTIALITY NOTICE: If you have received this e-mail in error, =
please immediately notify the sender by e-mail at the address shown. =
This e-mail transmission may contain confidential information. This =
information is only for the use of the individual(s) or entity to whom =
it is intended even if addressed incorrectly. Please delete it from your =
files if you are not the intended recipient. Thank you for your =
compliance.=20

[Cryptix-users] Cryptix - Getting Started..

[krish p. <kri...@su...>]

Hi,
    I'm just getting started with using Cryptix. So, I was wondering if 
someone could point me to some material online that could help me get a 
kick start (tutorials, documentation, javadoc, etc.). Thanks for your help!

-- krish

[Cryptix-users] Urgent: Regarding java.lang.ArrayIndexOutOfBoundsException during migration.

[Shri <sh...@ne...>]

Hi All,

            We are migrating our application from Websphere application
server 3.5.7(WAS3.5)  to WebSphere 6.x(WAS6) . During this process, the
passwords which are encrypted on WAS3.5 are not able to decrypt in WAS6. I
believe that WAS3.5 supports JDK.1.2.2 while as WAS6 supports J2RE 1.4.2. 

 

We are using Cryptix3.2, I increased the debug level in the properties
files(Cryptix.properties and IJCE.properties) and  got the following output
in the application server

Trace file.  Any help or suggestion is appreciated.

 

By the By , we are using Blowfish algorithm for 2-way encryption.

 

 

Note: The passwords which are encrypted using WAS6 are able to decrypt
successfully using WAS6. No issue here. 

 

 

[2/7/07 11:34:31:062 EST] 00000040 SystemErr     R   Blowfish: crc =
55861A61

 

[2/7/07 11:34:31:062 EST] 00000040 SystemErr     R   Blowfish: Good CRC on
initial P and S boxes? true

 

[2/7/07 11:34:31:062 EST] 00000040 SystemErr     R   Blowfish: Using native
library? false

 

[2/7/07 11:34:31:094 EST] 00000040 SystemErr     R   <Cipher [Cryptix
Blowfish/ECB/NONE]>.engineInitDecrypt(<cryptix.provider.key.RawSecretKey@51c
52c7c>)

 

[2/7/07 11:34:31:094 EST] 00000040 SystemErr     R   Blowfish: Self Test 1
Good

 

[2/7/07 11:34:31:125 EST] 00000040 SystemErr     R   Blowfish: Self Test 2
Good

 

[2/7/07 11:34:31:125 EST] 00000040 SystemErr     R   <Cipher [Cryptix
Blowfish/ECB/NONE]>.engineOutBufferSize(8, true) = 8

 

[2/7/07 11:34:31:125 EST] 00000040 SystemErr     R   <Cipher [Cryptix
Blowfish/ECB/NONE]>.engineOutBufferSize(8, false) = 8

 

[2/7/07 11:34:31:125 EST] 00000040 SystemErr     R   <Cipher [Cryptix
Blowfish/ECB/NONE]>.engineUpdate(<[B@33897a14>, 0, 8, <[B@3481ba14>, 0) = 8

 

[2/7/07 11:34:31:125 EST] 00000040 SystemErr     R   <PaddingScheme
[PKCS#5]>.engineUnpad(<[B@3481ba14>, 0, 8) = 6

 

 [2/7/07 11:42:22:328 EST] 0000003f SystemErr     R   <Cipher [Cryptix
Blowfish/ECB/NONE]>.engineInitDecrypt(<cryptix.provider.key.RawSecretKey@51c
52c7c>)

 

[2/7/07 11:42:22:328 EST] 0000003f SystemErr     R   Blowfish: Self Test 1
Good

 

[2/7/07 11:42:22:328 EST] 0000003f SystemErr     R   Blowfish: Self Test 2
Good

 

[2/7/07 11:42:22:328 EST] 0000003f SystemErr     R   <Cipher [Cryptix
Blowfish/ECB/NONE]>.engineOutBufferSize(8, true) = 8

 

[2/7/07 11:42:22:328 EST] 0000003f SystemErr     R   <Cipher [Cryptix
Blowfish/ECB/NONE]>.engineOutBufferSize(8, false) = 8

 

[2/7/07 11:42:22:328 EST] 0000003f SystemErr     R   <Cipher [Cryptix
Blowfish/ECB/NONE]>.engineUpdate(<[B@62b23a43>, 0, 8, <[B@6380fa43>, 0) = 8

 

[2/7/07 11:42:22:328 EST] 0000003f SystemErr     R   <PaddingScheme
[PKCS#5]>.engineUnpad(<[B@6380fa43>, 0, 8) = -169

 

[2/7/07 11:42:22:328 EST] 0000003f SystemErr     R
java.lang.ArrayIndexOutOfBoundsException

            at java.lang.System.arraycopy(Native Method)

            at xjava.security.Cipher.updateInternal(Cipher.java:1363)

            at xjava.security.Cipher.crypt(Cipher.java:1046)

            at xjava.security.Cipher.crypt(Cipher.java:1011)

            at
com.nc.pt.util.ABlowfishEncryptor.decrypt(ABlowfishEncryptor.java:45)

            at com.nc.pt.util.AEncryptor.decrypt(AEncryptor.java:287)

            at
com.nc.pt.util.AUserUtility.decryptMessage(AUserUtility.java:291)

            at
com.nc.pt.ejb.util.AEJBUtility.decryptTradingPassword(AEJBUtility.java:453)

            at
com.nc.pt.dao.AUserDAO.getClientUserProfile(AUserDAO.java:198)

            at
com.nc.pt.ejb.sb.AUserLoginSessionBean.getUserProfile(AUserLoginSessionBean.
java:698)

            at
com.nc.pt.ejb.sb.EJSRemoteStatelessAUserLoginSession_2ef31969.getUserProfile
(EJSRemoteStatelessAUserLoginSession_2ef31969.java:432)

            at
com.nc.pt.ejb.sb._AUserLoginSession_Stub.getUserProfile(_AUserLoginSession_S
tub.java:635)

            at
com.nc.pt.delegates.AUserDelegate.getUserProfile(AUserDelegate.java:35)

            at
com.nc.pt.servlet.helper.AAuthenticateUser.getClientUserProfile(AAuthenticat
eUser.java:273)

            at
com.nc.pt.servlet.helper.AAuthenticateUser.checkForRegisteredUser(AAuthentic
ateUser.java:159)

            at
com.nc.pt.servlet.helper.AAuthenticateUser.authenticateUser(AAuthenticateUse
r.java:47)

            at
com.nc.pt.servlet.helper.AAuthenticateUser.process(AAuthenticateUser.java:52
9)

            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

            at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:85
)

            at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:58
)

            at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java(Compiled Code))

            at java.lang.reflect.Method.invoke(Method.java(Compiled Code))

            at
com.nc.pt.servlet.AControlServlet.invokeMethod(AControlServlet.java:477)

            at
com.nc.pt.servlet.AControlServlet.service(AControlServlet.java:191)

            at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)

            at
com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1
212)

            at
com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.
java:629)

            at
com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServl
etWrapper.java:80)

            at
com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:1657)

            at
com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:77)

            at
com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(Ht
tpInboundLink.java:421)

            at
com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewInformation(Ht
tpInboundLink.java:367)

            at
com.ibm.ws.http.channel.inbound.impl.HttpICLReadCallback.complete(HttpICLRea
dCallback.java:94)

            at
com.ibm.ws.tcp.channel.impl.WorkQueueManager.requestComplete(WorkQueueManage
r.java:548)

            at
com.ibm.ws.tcp.channel.impl.WorkQueueManager.attemptIO(WorkQueueManager.java
:601)

            at
com.ibm.ws.tcp.channel.impl.WorkQueueManager.workerRun(WorkQueueManager.java
:934)

            at
com.ibm.ws.tcp.channel.impl.WorkQueueManager$Worker.run(WorkQueueManager.jav
a:1021)

            at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1332)

 

 

Let me know if additional information is required.

 

Thanks

Shri

Re: [Cryptix-users] Problems with criptix

[Smith, C. <cs...@em...>]

java.security.InvalidKeyException: Not an ElGamalKey at
cryptix.jce.provider.elgamal.ElGamalCipher.engineInit(ElGamalCipher.java
:134)
at javax.crypto.Cipher.init(DashoA6275)
at cryptix.openpgp.algorithm.PGPElGamal.encrypt (PGPElGamal.java:550) at
cryptix.openpgp.packet.PGPPublicKeyEncryptedSessionKeyPacket.encrypt(PGP
PublicKeyEncryptedSessionKeyPacket.java:153)
.........


   Could anybody help me?

        Hello and this may seem like a routine and simple answer;
however, when I had this issue the problem was I was not using Java's
Strong policy jar files. Also the other issue could be the provider not
in the class path. Just some thoughts,

Corey R. Smith
Information Systems
System Analyst/Programmer
EMH Regional Healthcare System
Office: (440) 326-5228
Pager: (440) 758-6541
Cell:    (440) 315-4812
Fax:    (440) 329-7792
Visit our web site: http://www.emh-healthcare.org





CONFIDENTIALITY NOTICE: If you have received this e-mail in error, =
please immediately notify the sender by e-mail at the address shown. =
This e-mail transmission may contain confidential information. This =
information is only for the use of the individual(s) or entity to whom =
it is intended even if addressed incorrectly. Please delete it from your =
files if you are not the intended recipient. Thank you for your =
compliance.=20

[Cryptix-users] Problems with criptix

[Ivan P. <iva...@gm...>]

Hello everybody,

   I have a big problem with Criptix. In my project we use a JCE for encryp=
t
message with AES algorith.
   Now I encrypt messages with PGP and I have the next problem :

       If I use the provider Cryptix I can't use AES algorithms.
       If I use Sun JCE provider when I'm going to encrypt a message ones
take place the next error :


 java.security.InvalidKeyException: Not an ElGamalKey
at cryptix.jce.provider.elgamal.ElGamalCipher.engineInit(ElGamalCipher.java
:134)
at javax.crypto.Cipher.init(DashoA6275)
at cryptix.openpgp.algorithm.PGPElGamal.encrypt(PGPElGamal.java:550)
at cryptix.openpgp.packet.PGPPublicKeyEncryptedSessionKeyPacket.encrypt(
PGPPublicKeyEncryptedSessionKeyPacket.java:153)
.........


   Could anybody help me?

Thanks in advance
Iv=E1n Prieto

[Cryptix-users] Rijndael_Algorithm.java compatible with Perl's Crypt:Rijndael?

[Christopher T. <cht...@gm...>]

Hello all,

I'm wondering if the Rijndael_Algorithm.java is compatible with Perl's
Crypt:Rijndael?

I'm asking because I want to write a java program that will operate
with a perl script running on a unix machine that is expecting packets
to be encrypted using Crypt:Rijndael.

I understand that some algorithms may vary based on implementation,
but how much variance is there in a block cipher?


Respectfully,
Chris

[Cryptix-users] JCE Jurisdiction Policy Files - for IBM SDK 1.3.x

[Sameer P. <sam...@in...>]

Hi=20

Am using Websphere 5.x (which uses IBM SDK 1.3.x)

Where do I get the JCE Unlimited Strength Jurisdiction Policy Files for
IBM SDK 1.3.x ?

Note: Am able to download the same for SDK 1.4.1 & 1.4.2 from IBM web
site.

It would be great help, if some body can suggest me on the same.

Thanks
Sameer

-----Original Message-----
From: cry...@li...
[mailto:cry...@li...] On Behalf Of
cry...@li...
Sent: Sunday, December 10, 2006 1:38 AM
To: cry...@li...
Subject: Cryptix-Users Digest, Vol 7, Issue 2

Send Cryptix-Users mailing list submissions to
	cry...@li...

To subscribe or unsubscribe via the World Wide Web, visit
	https://lists.sourceforge.net/lists/listinfo/cryptix-users
or, via email, send a message with subject or body 'help' to
	cry...@li...

You can reach the person managing the list at
	cry...@li...

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Cryptix-Users digest..."


Today's Topics:

   1. Standard Cryptographic Algorithm Naming (Wei Dai)


----------------------------------------------------------------------

Message: 1
Date: Sat, 9 Dec 2006 09:58:21 +0800
From: "Wei Dai" <we...@we...>
Subject: [Cryptix-users] Standard Cryptographic Algorithm Naming
To: <cry...@li...>
Cc: dav...@ze...
Message-ID: <BAY...@ph...l>
Content-Type: text/plain; charset=3D"windows-1252"

Sorry if this is a bit off topic for the mailing list, but I'm trying to
get
in touch with David Hopwood, or a member of the Cryptix Foundation who
can
change the copyright license on the "Standard Cryptographic Algorithm
Naming" document. I'm the author and maintainer of Crypto++, an open
source
C++ class library of cryptographic algorithms, and I've depended on SCAN
as
a standard for naming and as a reference source. However the document
has
not been updated since 22 October, 2002, and my recent emails to David
Hopwood at his zetnet.co.uk address were bounced.

I'd like to update SCAN myself, but it's copyright license does not
allow
the document to be modified. I'm hoping someone here knows David's
current
contact information, or can change the copyright license to allow me to
update SCAN. Please reply to me off-list if you can help me.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2791 bytes
Desc: not available
Url :
http://sourceforge.net/mailarchive/forum.php?forum=3Dcryptix-users/attach=
m
ents/20061209/80ef92ae/attachment.bin=20

------------------------------

------------------------------------------------------------------------
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share
your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3D=
DEVDE
V

------------------------------

_______________________________________________
Cryptix-Users mailing list
Cry...@li...
https://lists.sourceforge.net/lists/listinfo/cryptix-users


End of Cryptix-Users Digest, Vol 7, Issue 2
*******************************************

[Cryptix-users] Need help with End of stream reached before data. over socket

[Bryan D. <bd...@bi...>]

I writing a simple echo client/server to practice with Cryptix.  I'm 
getting an end of stream reached before data exception I don't understand.

Here's the exception stack trace

cryptix.message.stream.MessageStreamException: End of stream reached 
before data.
        at 
cryptix.openpgp.provider.PGPDecodedMessageInputStream.engineInit(PGPDecodedMessageInputStream.java:70)
        at 
cryptix.message.stream.DecodedMessageInputStream.init(DecodedMessageInputStream.java:144)
        at 
com.bigfoot.bdunphy.recho.client.Conversation.<init>(Conversation.java:65)
        at 
com.bigfoot.bdunphy.recho.client.Main.connectMenuItemActionPerformed(Main.java:155)
        at com.bigfoot.bdunphy.recho.client.Main.access$000(Main.java:33)
        at 
com.bigfoot.bdunphy.recho.client.Main$1.actionPerformed(Main.java:77)
        at 
javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:1849)
        at 
javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2169)
        at 
javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:420)
        at 
javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:258)
        at javax.swing.AbstractButton.doClick(AbstractButton.java:302)
        at 
javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:1000)
        at 
javax.swing.plaf.basic.BasicMenuItemUI$Handler.menuDragMouseReleased(BasicMenuItemUI.java:1104)
        at 
javax.swing.JMenuItem.fireMenuDragMouseReleased(JMenuItem.java:578)
        at 
javax.swing.JMenuItem.processMenuDragMouseEvent(JMenuItem.java:475)
        at javax.swing.JMenuItem.processMouseEvent(JMenuItem.java:422)
        at 
javax.swing.MenuSelectionManager.processMouseEvent(MenuSelectionManager.java:283)
        at 
javax.swing.plaf.basic.BasicPopupMenuUI$MouseGrabber.eventDispatched(BasicPopupMenuUI.java:779)
        at 
java.awt.Toolkit$SelectiveAWTEventListener.eventDispatched(Toolkit.java:2206)
        at 
java.awt.Toolkit$ToolkitEventMulticaster.eventDispatched(Toolkit.java:2100)
        at java.awt.Toolkit.notifyAWTEventListeners(Toolkit.java:2058)
        at java.awt.Component.dispatchEventImpl(Component.java:3867)
        at java.awt.Container.dispatchEventImpl(Container.java:2024)
        at java.awt.Component.dispatchEvent(Component.java:3803)
        at 
java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4212)
        at 
java.awt.LightweightDispatcher.processMouseEvent(Container.java:3892)
        at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3822)
        at java.awt.Container.dispatchEventImpl(Container.java:2010)
        at java.awt.Window.dispatchEventImpl(Window.java:1778)
        at java.awt.Component.dispatchEvent(Component.java:3803)
        at java.awt.EventQueue.dispatchEvent(EventQueue.java:463)
        at 
java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:242)
        at 
java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:163)
        at 
java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:157)
        at 
java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:149)
        at java.awt.EventDispatchThread.run(EventDispatchThread.java:110)


and here's the code :  <-- marks the line the exception is thrown on.

    protected Conversation(Socket socket, PGPKeyBundle pubKey, 
PGPKeyBundle secKey, char[] pass)
    {
        this.socket = socket;
        this.pubKey = pubKey;
        this.secKey = secKey;
        this.pass = pass;
        initComponents();
        try
        {
            DecodedMessageInputStream dmis = 
DecodedMessageInputStream.getInstance("OpenPGP");
            InputStream sin = this.socket.getInputStream();
            LiteralMessageOutputStream lit = 
LiteralMessageOutputStream.getInstance("OpenPGP");
            SignedMessageOutputStream sign = 
SignedMessageOutputStream.getInstance("OpenPGP");
            EncryptedMessageOutputStream enc = 
EncryptedMessageOutputStream.getInstance("OpenPGP");
            SecureRandom rand = new SecureRandom();
            lit.init(sign, rand);
            sign.init(enc, rand);
            enc.init(this.socket.getOutputStream(), rand);
            sign.addSigner(this.secKey, this.pass);
            ExtendedKeyStore ring = (ExtendedKeyStore) 
ExtendedKeyStore.getInstance("OpenPGP/KeyRing");
            ring.load(sin, null);
            remoteKey = (PGPKeyBundle) ring.getKeyBundle((String) 
ring.aliases().nextElement());
            dmis.init(sin, this, this);   <--
            enc.addRecipient(remoteKey);
            in = new BufferedReader(new InputStreamReader(dmis));
            out = new PrintWriter(new OutputStreamWriter(lit), true);
        }
        catch (NoSuchAlgorithmException e)
        {
            e.printStackTrace();
        }
        catch (IOException e)
        {
            e.printStackTrace();
        }
        catch (UnrecoverableKeyException e)
        {
            e.printStackTrace();
        }
        catch (KeyStoreException e)
        {
            e.printStackTrace();
        }
       catch (CertificateException e)
        {
            e.printStackTrace();
        }
     }


I can post the corresponding server code as well if needed

Re: [Cryptix-users] cryptix with jdk1.5.0_09

[Allan R. <ar...@ex...>]

We had a lot of trouble going to jdk 1.5 because of the order of the
security providers changed, putting a Sun RSA implementation in front of the
Cryptix RSA implementation.

The workaround that worked for us is to insert Cryptix provider in FRONT of
the intruder before getting the cipher instance. Here's how that can be done
in java:

 

            java.security.Security.insertProviderAt(new
cryptix.provider.Cryptix(), 1);

            cipher = xjava.security.Cipher.getInstance("RSA");

 

If you leave the security provider list as is, or insert Cryptix at the end,
you will get an erroneous provider.

 

This assumes dynamic provider addition; I don't have any advice if you must
use static provider addition.

 

Hope this helps.

 

Allan Rofer

  _____  

From: cry...@li...
[mailto:cry...@li...] On Behalf Of Nazli
Soltani
Sent: Tuesday, December 19, 2006 7:02 AM
To: cry...@li...
Subject: [Cryptix-users] cryptix with jdk1.5.0_09

 

Hello,
i just wanted to test an example with cryptix, which i found on :
http://www.ztt.fh-worms.de/de/others/sem/unsorted/cryptix/key_code.html

just only to create an RSA key pair.

I downloaded cryptix version 3.2.0. Then I added the 


provider to java Security, but doesn't work.





Java cannot resole the import like :





import cryptix.security.rsa.*;


import cryptix.security.*;


import cryptix.math.*;





Can anyone please help me? Should i change the codes


for the new cryptix version?





thanks a lot,


Nazli

 __________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

Re: [Cryptix-users] cryptix with jdk1.5.0_09

[Smith, C. <cs...@em...>]

Is the Jar file in your class path? :) I know this may be an obvious
check, but just curious. :)



Corey R. Smith
Information Systems
System Analyst/Programmer
EMH Regional Healthcare System
Office: (440) 326-5228
Pager: (440) 758-6541
Cell:    (440) 315-4812
Fax:    (440) 329-7792
Visit our web site: http://www.emh-healthcare.org
=20
=20

CONFIDENTIALITY NOTICE: If you have received this e-mail in error, =
please immediately notify the sender by e-mail at the address shown. =
This e-mail transmission may contain confidential information. This =
information is only for the use of the individual(s) or entity to whom =
it is intended even if addressed incorrectly. Please delete it from your =
files if you are not the intended recipient. Thank you for your =
compliance.=20

[Cryptix-users] cryptix with jdk1.5.0_09

[Nazli S. <ns...@ya...>]

Hello,
i just wanted to test an example with cryptix, which i found on :
http://www.ztt.fh-worms.de/de/others/sem/unsorted/cryptix/key_code.html

just only to create an RSA key pair.

I downloaded cryptix version 3.2.0. Then I added the 
provider to java Security, but doesn't work.

Java cannot resole the import like :

import cryptix.security.rsa.*;
import cryptix.security.*;
import cryptix.math.*;

Can anyone please help me? Should i change the codes
for the new cryptix version?

thanks a lot,
Nazli


 __________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

[Cryptix-users] Standard Cryptographic Algorithm Naming

[David H. <dav...@bl...>]

[Sorry to bother the Cryptix list with this, but direct e-mail from me to Wai Dai,
or to Ian Grigg who forwarded this to me, is not getting through for some reason.]

Wei Dai wrote:

> Sorry if this is a bit off topic for the mailing list, but I'm trying to get
> in touch with David Hopwood, or a member of the Cryptix Foundation who can
> change the copyright license on the "Standard Cryptographic Algorithm
> Naming" document. I'm the author and maintainer of Crypto++, an open source
> C++ class library of cryptographic algorithms, and I've depended on SCAN as
> a standard for naming and as a reference source. However the document has
> not been updated since 22 October, 2002, and my recent emails to David
> Hopwood at his zetnet.co.uk address were bounced.
>
> I'd like to update SCAN myself, but it's copyright license does not allow
> the document to be modified. I'm hoping someone here knows David's current
> contact information, or can change the copyright license to allow me to
> update SCAN. Please reply to me off-list if you can help me.

Please consider SCAN to now be in the public domain -- or under the current
Cryptix license if that is more convenient.

I think that my local copy of SCAN has some minor updates relative to the
version on my old home page (http://www.users.zetnet.co.uk/hopwood/crypto/scan/).
I changed my ISP several years ago, and I'm not sure why that page is even still
accessible. I will post the local copy, with the license restrictions removed,
within a few days.

-- 
David Hopwood <dav...@bl...>

(or <dav...@bl...>, both addresses are valid)

[Cryptix-users] Standard Cryptographic Algorithm Naming

[Wei D. <we...@we...>]

Sorry if this is a bit off topic for the mailing list, but I'm trying to get
in touch with David Hopwood, or a member of the Cryptix Foundation who can
change the copyright license on the "Standard Cryptographic Algorithm
Naming" document. I'm the author and maintainer of Crypto++, an open source
C++ class library of cryptographic algorithms, and I've depended on SCAN as
a standard for naming and as a reference source. However the document has
not been updated since 22 October, 2002, and my recent emails to David
Hopwood at his zetnet.co.uk address were bounced.

I'd like to update SCAN myself, but it's copyright license does not allow
the document to be modified. I'm hoping someone here knows David's current
contact information, or can change the copyright license to allow me to
update SCAN. Please reply to me off-list if you can help me.

[Cryptix-users] Cannot encrypt file greater the 1 GB

[<pra...@ac...>]

Hi,

I am using the StreamEncrypt example provided for encrypting a 3
Gigabyte file. The process is failing consistently after encrypting 1 GB
of the file. Here is the stacktrace.

ERROR: :    java.lang.ArrayIndexOutOfBoundsException: -7
	at cryptix.jce.provider.cipher.ModeCFB.crank(ModeCFB.java:138)
	at
cryptix.jce.provider.cipher.ModeCFB.shiftInByte(ModeCFB.java:126)
	at
cryptix.jce.provider.cipher.ModeCFB.coreUpdate(ModeCFB.java:190)
	at cryptix.jce.provider.cipher.Mode.update(Mode.java:141)
	at cryptix.jce.provider.cipher.Padding.update(Padding.java:188)
	at
cryptix.jce.provider.cipher.BlockCipher.engineUpdate(BlockCipher.java:30
6)
	at
cryptix.jce.provider.cipher.BlockCipher.engineUpdate(BlockCipher.java:32
1)
	at javax.crypto.Cipher.update(DashoA12275)
	at
cryptix.openpgp.provider.PGPEncryptedMessageOutputStream.engineWrite(PGP
EncryptedMessageOutputStream.java:372)
	at
cryptix.message.stream.MessageOutputStream.write(MessageOutputStream.jav
a:127)
	at
cryptix.openpgp.provider.PGPLiteralMessageOutputStream.engineWrite(PGPLi
teralMessageOutputStream.java:168)
	at
cryptix.message.stream.MessageOutputStream.write(MessageOutputStream.jav
a:141)
=09

Does anyone if cryptix implementation has a limitation that it cannot
encrypt a file greater then 1 GB.=20

Any help is appreciated


Thanks
Pramod



This message is for the designated recipient only and may contain =
privileged, proprietary, or otherwise private information.  If you have =
received it in error, please notify the sender immediately and delete =
the original.  Any other use of the email by you is prohibited.

Re: [Cryptix-users] help

[Smith, C. <cs...@em...>]

 How do I do the decryption process.Is anybody having any code for
decryption through cryptix.jar API's.


        Hello and how is it? Everything would be the same as encryption.
Same as loading the providers, reading the decrypt key, and iterate
through the message. The difference would be using this method inside
this object: EncryptedMessage.decrypt(Bundle,
"PassPhrase".toCharArray()); I hope this helps. :)


Corey R. Smith
Information Systems
System Analyst/Programmer
Visit our web site: http://www.emh-healthcare.org





CONFIDENTIALITY NOTICE: If you have received this e-mail in error, =
please immediately notify the sender by e-mail at the address shown. =
This e-mail transmission may contain confidential information. This =
information is only for the use of the individual(s) or entity to whom =
it is intended even if addressed incorrectly. Please delete it from your =
files if you are not the intended recipient. Thank you for your =
compliance.=20

[Cryptix-users] help

[manoj j. <man...@mp...>]

Hi all,

          I need help in this. I have a usual situation where I have PGP
encrypted file to be decrypted.

          I'm using cryptix.jar for my project encryption/decryption
processes.

          How do I do the decryption process.Is anybody having any code for
decryption through cryptix.jar API's.

          Waiting for reply.

  

Thanks and Regards,

Manoj

Information transmitted by this e-mail is proprietary to MphasiS and/ or its
Customers and is intended for use only by the individual or entity to which
it is addressed, and may contain information that is privileged,
confidential or exempt from disclosure under applicable law. If you are not
the intended recipient or it appears that this mail has been forwarded to
you without proper authority, you are notified that any use or dissemination
of this information in any manner is strictly prohibited. In such cases,
please notify us immediately at  <BLOCKED::mailto:mai...@mp...>
mai...@mp... and delete this mail from your records.

 

 

[Cryptix-users] Crypt then sign?

[Joern M. <jo...@mu...>]

Hello everybody,

I have tested the EncryptAndSign example - it is working - and I am 
quite satisfied with the library.

But: I need to sign the literal first, then encrypt and then sign. But 
if I do so, I get an Exception: Can sign literal only.

Is this possible with Cryptix-JCE and Cryptix-openPGP?

Regards
Joern

Re: [Cryptix-users] New here... which server is this best suited for?

[Robert V. <rve...@ve...>]

Okay, so if that is the case (which makes like easy), and because I am
new to this product, is there anything on the Cryptix website that
explains the install and scenario's for this?  ie:  If we use a Windows
server, what FTP server is best suited, how it talks to it etc...?
 
Thanks much!
 
Robert 


>>> "Carl Fyffe" <car...@gm...> 11/7/2006 10:12:05 am >>>
Robert,

To answer your original question, it doesn't matter if you are on
Windows, Linux or some Unix implementation. As long as you have Java
installed you are good to go.

To answer your question about it effecting the other users, it depends
on your implementation. There are two ways to add the Cryptix security
profiles to Java. One will make Cryptix available to all users of the
JVM on the machine. The other allows you to load the libraries at
Runtime. If you have control over the JVM, go ahead and load the
libraries into the JVM, otherwise you will have to load them
programatically.

Carl

On 11/7/06, Robert Verones <rve...@ve...> wrote:
>
>
> Yes, I wasn't too concerned with performance, more with compatability
and
> stability more than anything.
>
> Based on what I read, it looks very generic, so it should work on
anything.
> Question is, how does it affect other users of that server for FTP
services.
>  Can it be setup for 1 specific user and not for the rest?
>
>
> >>> Robert Rich <rr...@gs...> 11/7/2006 8:35 am >>>
> I'm no expert in Cryptix, but it should work on more or less
anything.
> I would be far more concerned with the security of the FTP
> implementation than the performance of Cryptix on a given platform.
> OpenPGP doesn't do you any good when the ftp server has a buffer
> overflow in the login process. :)
>
> Hope that helps.
>
> Bob
>
>
> Robert Verones wrote:
> > Hi,
> >
> > I have never heard of this product before, but a client wants us
to
> > use it for their setup (FTP via Open PGP certificate handshake).
> >
> > Is there a "better than" type server for this, or does it work on
> > anything?
> >
> > ie:  Windows, Linux, Netware, or is it made more for a Unix server
> > like they are using?
> >
> > Robert
> >
>
------------------------------------------------------------------------
> >
> >
>
-------------------------------------------------------------------------
> > Using Tomcat but need to do more? Need to support web services,
security?
> > Get stuff done quickly with pre-integrated technology to make your
job
> easier
> > Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
> >
>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> >
>
------------------------------------------------------------------------
> >
> > _______________________________________________
> > Cryptix-Users mailing list
> > Cry...@li...
> >
> https://lists.sourceforge.net/lists/listinfo/cryptix-users
> >
>
>
>
>
-------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services,
security?
> Get stuff done quickly with pre-integrated technology to make your
job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>
> _______________________________________________
> Cryptix-Users mailing list
> Cry...@li...
> https://lists.sourceforge.net/lists/listinfo/cryptix-users
>
>
>

Re: [Cryptix-users] New here... which server is this best suited for?

[Robert V. <rve...@ve...>]

The way this is supposed to work is, we have to have this on our FTP
server.  
 

Step 1:  Determine if there is FTP connectivity.  Provide IP/DNS.
Step 2:  Determine if PGP is available.
Step 3:  Determine if there will be 1-way or 2-way file exchange.
Step 4:  Determine file Transfer Period (Day/Time).
Step 5:  Determine file names.
Step 6:  Exchange PGP keys.   Recipient must provide the sender a copy
of recipient's public key for encryption.
Step 7:  Exchange files via FTP and test decryption.
 
These were the steps we were given.


>>> Robert Rich <rr...@gs...> 11/7/2006 10:05 am >>>
Robert Verones wrote:
> Yes, I wasn't too concerned with performance, more with compatability

> and stability more than anything.
Your biggest issues will be with the version of Java you are using. 
>  
> Based on what I read, it looks very generic, so it should work on 
> anything.  Question is, how does it affect other users of that server

> for FTP services.  Can it be setup for 1 specific user and not for
the 
> rest?
That depends on the FTP server that is being used.  Are you going to be

implementing the server or the client?  Have you looked at this?  
http://www.cuteftp.com/eft/features.asp
>
>
> >>> Robert Rich <rr...@gs...> 11/7/2006 8:35 am >>>
> I'm no expert in Cryptix, but it should work on more or less
anything. 
> I would be far more concerned with the security of the FTP
> implementation than the performance of Cryptix on a given platform. 
> OpenPGP doesn't do you any good when the ftp server has a buffer
> overflow in the login process. :)
>
> Hope that helps.
>
> Bob
>
>
> Robert Verones wrote:
> > Hi,
> > 
> > I have never heard of this product before, but a client wants us
to
> > use it for their setup (FTP via Open PGP certificate handshake).
> > 
> > Is there a "better than" type server for this, or does it work on
> > anything?
> > 
> > ie:  Windows, Linux, Netware, or is it made more for a Unix server
> > like they are using?
> > 
> > Robert
> >
------------------------------------------------------------------------
> >
> > 
>
-------------------------------------------------------------------------
> > Using Tomcat but need to do more? Need to support web services, 
> security?
> > Get stuff done quickly with pre-integrated technology to make your

> job easier
> > Download IBM WebSphere Application Server v.1.0.1 based on Apache 
> Geronimo
> >
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> >
------------------------------------------------------------------------
> >
> > _______________________________________________
> > Cryptix-Users mailing list
> > Cry...@li...
> > https://lists.sourceforge.net/lists/listinfo/cryptix-users
> >  
>
>
>
------------------------------------------------------------------------
>
>
-------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services,
security?
> Get stuff done quickly with pre-integrated technology to make your
job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>
------------------------------------------------------------------------
>
> _______________________________________________
> Cryptix-Users mailing list
> Cry...@li...
> https://lists.sourceforge.net/lists/listinfo/cryptix-users
>   

Re: [Cryptix-users] New here... which server is this best suited for?

[Robert R. <rr...@gs...>]

Robert Verones wrote:
> Yes, I wasn't too concerned with performance, more with compatability 
> and stability more than anything.
Your biggest issues will be with the version of Java you are using. 
>  
> Based on what I read, it looks very generic, so it should work on 
> anything.  Question is, how does it affect other users of that server 
> for FTP services.  Can it be setup for 1 specific user and not for the 
> rest?
That depends on the FTP server that is being used.  Are you going to be 
implementing the server or the client?  Have you looked at this?  
http://www.cuteftp.com/eft/features.asp
>
>
> >>> Robert Rich <rr...@gs...> 11/7/2006 8:35 am >>>
> I'm no expert in Cryptix, but it should work on more or less anything. 
> I would be far more concerned with the security of the FTP
> implementation than the performance of Cryptix on a given platform. 
> OpenPGP doesn't do you any good when the ftp server has a buffer
> overflow in the login process. :)
>
> Hope that helps.
>
> Bob
>
>
> Robert Verones wrote:
> > Hi,
> > 
> > I have never heard of this product before, but a client wants us to
> > use it for their setup (FTP via Open PGP certificate handshake).
> > 
> > Is there a "better than" type server for this, or does it work on
> > anything?
> > 
> > ie:  Windows, Linux, Netware, or is it made more for a Unix server
> > like they are using?
> > 
> > Robert
> > ------------------------------------------------------------------------
> >
> > 
> -------------------------------------------------------------------------
> > Using Tomcat but need to do more? Need to support web services, 
> security?
> > Get stuff done quickly with pre-integrated technology to make your 
> job easier
> > Download IBM WebSphere Application Server v.1.0.1 based on Apache 
> Geronimo
> > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Cryptix-Users mailing list
> > Cry...@li...
> > https://lists.sourceforge.net/lists/listinfo/cryptix-users
> >  
>
>
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> ------------------------------------------------------------------------
>
> _______________________________________________
> Cryptix-Users mailing list
> Cry...@li...
> https://lists.sourceforge.net/lists/listinfo/cryptix-users
>   

Re: [Cryptix-users] New here... which server is this best suited for?

[Robert V. <rve...@ve...>]

Yes, I wasn't too concerned with performance, more with compatability
and stability more than anything.
 
Based on what I read, it looks very generic, so it should work on
anything.  Question is, how does it affect other users of that server
for FTP services.  Can it be setup for 1 specific user and not for the
rest?


>>> Robert Rich <rr...@gs...> 11/7/2006 8:35 am >>>
I'm no expert in Cryptix, but it should work on more or less anything. 

I would be far more concerned with the security of the FTP 
implementation than the performance of Cryptix on a given platform.  
OpenPGP doesn't do you any good when the ftp server has a buffer 
overflow in the login process. :)

Hope that helps.

Bob


Robert Verones wrote:
> Hi,
>  
> I have never heard of this product before, but a client wants us to 
> use it for their setup (FTP via Open PGP certificate handshake).
>  
> Is there a "better than" type server for this, or does it work on 
> anything?
>  
> ie:  Windows, Linux, Netware, or is it made more for a Unix server 
> like they are using?
>  
> Robert
>
------------------------------------------------------------------------
>
>
-------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services,
security?
> Get stuff done quickly with pre-integrated technology to make your
job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>
------------------------------------------------------------------------
>
> _______________________________________________
> Cryptix-Users mailing list
> Cry...@li...
> https://lists.sourceforge.net/lists/listinfo/cryptix-users
>   

Re: [Cryptix-users] New here... which server is this best suited for?

[Robert R. <rr...@gs...>]

I'm no expert in Cryptix, but it should work on more or less anything.  
I would be far more concerned with the security of the FTP 
implementation than the performance of Cryptix on a given platform.  
OpenPGP doesn't do you any good when the ftp server has a buffer 
overflow in the login process. :)

Hope that helps.

Bob


Robert Verones wrote:
> Hi,
>  
> I have never heard of this product before, but a client wants us to 
> use it for their setup (FTP via Open PGP certificate handshake).
>  
> Is there a "better than" type server for this, or does it work on 
> anything?
>  
> ie:  Windows, Linux, Netware, or is it made more for a Unix server 
> like they are using?
>  
> Robert
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> ------------------------------------------------------------------------
>
> _______________________________________________
> Cryptix-Users mailing list
> Cry...@li...
> https://lists.sourceforge.net/lists/listinfo/cryptix-users
>   

[Cryptix-users] New here... which server is this best suited for?

[Robert V. <rve...@ve...>]

Hi,
 
I have never heard of this product before, but a client wants us to use
it for their setup (FTP via Open PGP certificate handshake).
 
Is there a "better than" type server for this, or does it work on
anything?
 
ie:  Windows, Linux, Netware, or is it made more for a Unix server like
they are using?
 
Robert

[Cryptix-users] Working with pkr files and PGP Desktop

[Sam C. <spe...@ho...>]

Hello all,

I use openPGP to interact with PGPDesktop-handled files. I read and 
basically understood the examples, but I still have questions.
It's OK to generate pkr/skr files as key files thanks to the examples, but I 
didn't find how to use a skr file to decrypt. I try to replace
new FileInputStream("bob-secret.pgp.asc"); with
new FileInputStream("e:/secring.skr"); in Decrypt.java, but I get a 
InvalidKeyException.
I also have a .pgp encrypted file (PGPDesktop format), but in the example a 
.pgp.asc file is used. I guess there is a trick to be able to decrypt my 
.pgp file, but how ?
Also, is it possible to encrypt with openPGP in .pgp format instead of .asc 
?

Hope these questions don't look too stupid, but I'm a newbie with 
encryption.

I'll really appreciate any kind of help.

Thanks in advance.

Best regards.

Sam

_________________________________________________________________
Retrouvez tout en un clin d'oeil avec Live Search ! 
http://www.live.com/?mkt=fr-fr

[Cryptix-users] Working with pkr files and PGP Desktop

[Sam C. <spe...@ho...>]

Hello all,

I use openPGP to interact with PGPDesktop-handled files. I read and 
basically understood the examples, but I still have questions.
It's OK to generate pkr/skr files as key files thanks to the examples, but I 
didn't find how to use a skr file to decrypt. I try to replace
new FileInputStream("bob-secret.pgp.asc"); with
new FileInputStream("e:/secring.skr"); in Decrypt.java, but I get a 
InvalidKeyException.
I also have a .pgp encrypted file (PGPDesktop format), but in the example a 
.pgp.asc file is used. I guess there is a trick to be able to decrypt my 
.pgp file, but how ?
Also, is it possible to encrypt with openPGP in .pgp format instead of .asc 
?

Hope these questions don't look too stupid, but I'm a newbie with 
encryption.

I'll really appreciate any kind of help.

Thanks in advance.

Best regards.

Sam

_________________________________________________________________
Retrouvez tout en un clin d'œil avec Windows Desktop Search ! 
http://desktop.msn.fr/