cryptix-users — Cryptix User Group

[Cryptix-users] =?utf-8?Q?Re:_Cryptix=2DUsers_digest,_Vol_1_#467_=2D_2_msgs?=

[<fra...@gl...>]

Sehr geehrte Kundin, sehr geehrter Kunde, 

wegen des Überganges der GLOBALE Krankenversicherungs-AG zur DKV Deutsche Krankenversicherung AG ist diese E-Mail-Adresse nicht mehr erreichbar. 

Fragen zu Ihrer Krankenversicherung beantworten wir Ihnen gerne unter folgender E-Mail Adresse: 

se...@dk... 

oder telefonisch unter der Nummer 

0180 13 58 100 

Wir bitten um Ihr Verständnis und verbleiben mit freundlichen Grüßen 

Ihre DKV Deutsche Krankenversicherung AG 

Re: [Cryptix-users] PGP Desktop private key storage

[Aredeji D. <ar...@ho...>]

Dear Paul,

Thank you on your reply. Currently, I have the policy files installed and I 
am able to use the PGP Desktop 9 key pairs for encryption, decryption, 
signing and verifying but I cannot write the private key to the private key 
ring.

Best wishes,
Ared


>From: "Paul SAPSFORD" <pa...@ro...>
>To: "Aredeji Dador" <ar...@ho...>
>Subject: Re: [Cryptix-users] PGP Desktop private key storage
>Date: Fri, 31 Mar 2006 14:52:30 +0100
>
>Hi Ared,
>
>I'm coming in here at a very, very basic level so please dont shoot if this 
>is not the answer. While trying to get cryptix to work I had a similar 
>problem when try in get a simple encoded key.
>
>Ensure you have the local_policy.jar supplied by cryptix installed in;
>
><java>/jre/lib/secutity/
>
>Hope it helps,
>
>Paul
>
>----- Original Message ----- From: "Aredeji Dador" <ar...@ho...>
>To: <cry...@li...>
>Sent: Friday, March 31, 2006 10:42 AM
>Subject: [Cryptix-users] PGP Desktop private key storage
>
>
>>I get the following exception when I try to store a PGP Desktop 9 private 
>>key inside a private key ring. Please let me know if you could help or if 
>>you need more information.
>>
>>Exception in thread "AWT-EventQueue-0" java.lang.NullPointerException
>>at 
>>cryptix.openpgp.provider.PGPKeyBundleImpl.getEncoded(PGPKeyBundleImpl.java:191)
>>at 
>>cryptix.openpgp.provider.PGPKeyRingKeyStore.engineStore(PGPKeyRingKeyStore.java:337)
>>at java.security.KeyStore.store(KeyStore.java:1085)
>>
>>I am also unable to retrieve the private key creation date and the trust 
>>level. If there is no way for me to fix the problem please let me know if 
>>and how I can circumvent the problem.
>>
>>Best wishes,
>>Ared
>>
>>_________________________________________________________________
>>Don't just search. Find. Check out the new MSN Search! 
>>http://search.msn.click-url.com/go/onm00200636ave/direct/01/
>>
>>
>>
>>-------------------------------------------------------
>>This SF.Net email is sponsored by xPML, a groundbreaking scripting 
>>language
>>that extends applications into web and mobile media. Attend the live 
>>webcast
>>and join the prime developer group breaking into this new coding 
>>territory!
>>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>>_______________________________________________
>>Cryptix-Users mailing list
>>Cry...@li...
>>https://lists.sourceforge.net/lists/listinfo/cryptix-users
>>
>>
>
>
>
>

_________________________________________________________________
On the road to retirement? Check out MSN Life Events for advice on how to 
get there! http://lifeevents.msn.com/category.aspx?cid=Retirement

[Cryptix-users] PGP Desktop private key storage

[Aredeji D. <ar...@ho...>]

I get the following exception when I try to store a PGP Desktop 9 private 
key inside a private key ring. Please let me know if you could help or if 
you need more information.

Exception in thread "AWT-EventQueue-0" java.lang.NullPointerException
	at 
cryptix.openpgp.provider.PGPKeyBundleImpl.getEncoded(PGPKeyBundleImpl.java:191)
	at 
cryptix.openpgp.provider.PGPKeyRingKeyStore.engineStore(PGPKeyRingKeyStore.java:337)
	at java.security.KeyStore.store(KeyStore.java:1085)

I am also unable to retrieve the private key creation date and the trust 
level. If there is no way for me to fix the problem please let me know if 
and how I can circumvent the problem.

Best wishes,
Ared

_________________________________________________________________
Don’t just search. Find. Check out the new MSN Search! 
http://search.msn.click-url.com/go/onm00200636ave/direct/01/

[Cryptix-users] Trouble reading some public keys with jpeg images

[Dirk J. <cr...@di...>]

Hi!

I'm having problems using some public-keys for encryption.

I was unable to read my gpg-keyring with ExtendedKeystore.load(). I got
the following Exception:

----------- SNIP ---------------
java.security.cert.CertificateException: Error while reading keyring -
cryptix.pki.KeyBundleException:
cryptix.openpgp.PGPFatalDataFormatException: Invalid packet type.
        at
cryptix.openpgp.provider.PGPKeyRingKeyStore.engineLoad(PGPKeyRingKeyStore.java:398)
        at java.security.KeyStore.load(KeyStore.java:1150)
        at ReadKeyRingShowKeys.readKeyRing(ReadKeyRingShowKeys.java:115)

----------- SNIP ---------------

I exported all the keys to different files and for some files I got the
following exception while using MessageFactory.generateMessages():

----------- SNIP ---------------
cryptix.message.MessageException: cryptix.pki.KeyBundleException:
cryptix.openpgp.PGPFatalDataFormatException: Invalid packet type.
        at
cryptix.openpgp.provider.PGPMessageFactory.generateBinary(PGPMessageFactory.java:246)
        at
cryptix.openpgp.provider.PGPMessageFactory.engineGenerateMessages(PGPMessageFactory.java:76)
        at
cryptix.message.MessageFactory.generateMessages(MessageFactory.java:142)
        at EncryptToKeyId.main(EncryptToKeyId.java:138)
----------- SNIP ---------------


All those keys failing to be read contained jpeg images of about 10kb or
more in size. The was one more key that could be read which also
contained a jpeg image (of less than 3kb).

Is there a known problem with (big) images in public keys?

Is it possible to strip off those images?



Thanks for your help,

Dirk

[Cryptix-users] PKR file needed

[Paul S. <pa...@ro...>]

Hi Everyone,

after installation of OpenPGP for Cryptix I'm having a problem getting =
the EncryptMessage.java example to work. It falls over with;

>>>> cryptix.message.MessageException: No encryption key found.

I've been told that it could be a signing only key that does not contain =
an encryption subkey.

If anyone has a simple test public key ring file I could use which they =
know works, then I would be very grateful if it could be sent to me to =
reveal which line of investigation I need to pursue.

Thanks in advance,

Regards,

Paul.

[Cryptix-users] RE: FTP Issue!!

[Devendra P. <dev...@br...>]

Hi-
 
I have been able to do solve my issue what I did is just removed the
declaration of A.C1.FTPLibrary. :-) !!!!!
 
Thanks & Regards,
Devendra Pal Singh.
BrickRed Technologies.
 
 
-----Original Message-----
From: Devendra Pal [mailto:dev...@br...] 
Sent: Sunday, March 26, 2006 1:22 AM
To: 'cry...@li...'; 'Edwin Woudt'
Cc: 'cry...@li...'
Subject: FTP Issue!!
 
Hi-
 
I am not able to download file from FTP using Open Adapter, when ever I
try to connect it says "WARN: Error retrieving file: 500 Invalid PORT
Command." But with same port number {20} I am able to upload file on FTP
using Open Adapter.
 
Could some body help me out!!
 
PROPERTY FILE FOR DOWNLOADING FILE IS BELOW
************************************************************************
*************************************
 
#-----------------------------------------------------------------------
-----------
# Components:
#-----------------------------------------------------------------------
-----------
A.Component1.Name = C1
A.Component2.Name = C2
 
A.C1.LinkTo1 = C2
A.C1.ClassName                = org.openadaptor.adaptor.ftp.FTPSource
A.C1.DOStringReader           =
org.openadaptor.dostrings.DelimitedStringReader
A.C1.NumAttributes            = 6
A.C1.FieldDelimiter           = 44
 
A.C1.HostName                 = ******
A.C1.UserName                 = ******
A.C1.Password                 = ******
A.C1.Port                     = 20
 
A.C1.FTPLibrary               = org.openadaptor.adaptor.ftp.ApacheFTP
 
A.C1.SourceDir                = /takecharge
A.C1.ChangeDir                = true
A.C1.SourceFile               = /in.txt
A.C1.DeleteSourceFile         = false
 
 
#-----------------------------------------------------------------------
-----------
# C2: FileSink - writes data to file
#-----------------------------------------------------------------------
-----------
A.C2.ClassName                =
org.openadaptor.adaptor.standard.FileSink
A.C2.DOStringWriter           =
org.openadaptor.dostrings.DelimitedStringWriter
A.C2.OutputFileName           = /downloads/ftp.out
A.C2.CreateOutputFile         = true
 
************************************************************************
*************************************
 
Devendra Pal Singh.
BrickRed Technologies.
E :- 100
 

[Cryptix-users] FTP Issue!!

[Devendra P. <dev...@br...>]

Hi-
 
I am not able to download file from FTP using Open Adapter, when ever I
try to connect it says "WARN: Error retrieving file: 500 Invalid PORT
Command." But with same port number {20} I am able to upload file on FTP
using Open Adapter.
 
Could some body help me out!!
 
PROPERTY FILE FOR DOWNLOADING FILE IS BELOW
************************************************************************
*************************************
 
#-----------------------------------------------------------------------
-----------
# Components:
#-----------------------------------------------------------------------
-----------
A.Component1.Name = C1
A.Component2.Name = C2
 
A.C1.LinkTo1 = C2
A.C1.ClassName                = org.openadaptor.adaptor.ftp.FTPSource
A.C1.DOStringReader           =
org.openadaptor.dostrings.DelimitedStringReader
A.C1.NumAttributes            = 6
A.C1.FieldDelimiter           = 44
 
A.C1.HostName                 = ******
A.C1.UserName                 = ******
A.C1.Password                 = ******
A.C1.Port                     = 20
 
A.C1.FTPLibrary               = org.openadaptor.adaptor.ftp.ApacheFTP
 
A.C1.SourceDir                = /takecharge
A.C1.ChangeDir                = true
A.C1.SourceFile               = /in.txt
A.C1.DeleteSourceFile         = false
 
 
#-----------------------------------------------------------------------
-----------
# C2: FileSink - writes data to file
#-----------------------------------------------------------------------
-----------
A.C2.ClassName                =
org.openadaptor.adaptor.standard.FileSink
A.C2.DOStringWriter           =
org.openadaptor.dostrings.DelimitedStringWriter
A.C2.OutputFileName           = /downloads/ftp.out
A.C2.CreateOutputFile         = true
 
************************************************************************
*************************************
 
Devendra Pal Singh.
BrickRed Technologies.
E :- 100
 

Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

[Ian G <ia...@sy...>]

Michael Seele wrote:
> is there no chance to rewrite fast ;-) the jce connection? or chance 
> some classes that cryptix doesn't make the check?


Anything can be hacked quickly, but for a
released product where lots of users depend
on it, we'd prefer to put some thought into
the API so that it doesn't kick back and
cause a stream of support problems...

(There isn't a "check" to make - all crypto
users are supposed to ask the JCE for a
module according to some string, and get a
Cryptix module or another as available.  So
what I am suggesting means that everyone
has to stop doing that.  All code has to
change.  Not a light request at all :) )

iang

Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

[Edwin W. <ed...@wo...>]

--On 24-3-2006 13:34 +0100 Michael Seele <ms...@gu...> wrote:
>
> is there no chance to rewrite fast ;-) the jce connection?

It's a bit of work. The fastest way is to take the cryptix jce cleanroom 
implementation, move the packages and change cryptix openpgp to use the new 
locations.

-- 
Edwin

Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

[Michael S. <ms...@gu...>]

is there no chance to rewrite fast ;-) the jce connection? or chance 
some classes that cryptix doesn't make the check?

Ian G schrieb:
> Michael Seele wrote:
>> hi,
>>
>> is there any chance to use the cryptix OpenPGP encryption engine 
>> without jce(that i must not copy the policity jar files into the jre) 
>> but with full key length?
>>
>> the problem is that we can't replace the jce jars on every pc where 
>> our application is running but we need "full" OpenPGP encryption...
> 
> Not answering your question, but I do feel your
> pain.  Something like half the problems in the
> Java crypto world relate to those darn policy
> files.
> 
> If I ever get another chance to inspire a rewrite
> of Cryptix, I'll almost certainly be asking that
> we avoid the JCE completely.  There are far too
> many security problems with the JCE concept, and
> I have yet to see a single practical or economic
> benefit to it.
> 
> (Please beat me to it :) )
> 
> 
> iang
> 

-- 
G & H Softwareentwicklung GmbH     Tel.: +49(0)7451/53706-20
Robert-Bosch-Str. 23               Fax:  +49(0)7451/53706-90
D-72160 Horb a.N.                  http://www.guh-software.de

Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

[Ian G <ia...@sy...>]

Michael Seele wrote:
> hi,
> 
> is there any chance to use the cryptix OpenPGP encryption engine without 
> jce(that i must not copy the policity jar files into the jre) but with 
> full key length?
> 
> the problem is that we can't replace the jce jars on every pc where our 
> application is running but we need "full" OpenPGP encryption...

Not answering your question, but I do feel your
pain.  Something like half the problems in the
Java crypto world relate to those darn policy
files.

If I ever get another chance to inspire a rewrite
of Cryptix, I'll almost certainly be asking that
we avoid the JCE completely.  There are far too
many security problems with the JCE concept, and
I have yet to see a single practical or economic
benefit to it.

(Please beat me to it :) )


iang

Re: [Cryptix-users] A hypothetical question

[Ian G <ia...@sy...>]

Bob Corcoran wrote:
> Would there ever be a valid reason to PGP encrypt a file and then send 
> it over an SSL connection? Or does the SSL session itself provide 
> adequate security?

SSL only encrypts over the wire, and does so at a lower
layer, so with a high security application there is
often the problem that you have split your security
up and have to trust some other department to get the
SSL right.  Do you trust the SSL to be always there
and always correctly implemented?  SSL itself is strong,
but it is generally implemented incompletely, so the
result is highly variable.  Saying that the security is
as strong as SSL is not saying very much.

If you "PGP encrypt a file" then you can integrate the
activity into the application, so any dependency on
outside systems is eliminated.   If you can integrate
the crypto into your application, then you can say that
the security is end-to-end, and is as strong as PGP,
which is a much stronger statement.

iang

PS: of course, being a hypothetical question, the details
matter.  It is quite possible to integrate SSL into the
app and get end-to-end.  But as you suggested "file" this
suggests that using SSL would be the wrong approach.

Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

[Michael S. <ms...@gu...>]

do you know another open source JCE implementation than cryptix (imho 
cryptix is a jce implementation, isn't it?!)?
is there any chance to tweak out the jce restrictions?

Andreas Kuehne schrieb:
> Hi All,
> 
> wouldn't it be possible to use an existing open source JCE implementation and tweak out the restrictions ?
> But you would have to sign the restriction-free JCE own your own.
> 
> Greetings
> 
> Andreas
> 
> ----- Original Message ----
> From: Michael Seele <ms...@gu...>
> To: Edwin Woudt <ed...@wo...>
> Cc: cry...@li...
> Sent: Friday, March 24, 2006 10:05:20 AM
> Subject: Re: [Cryptix-users] Use cryptix OpenPGP without jce policity
> 
> thank you for your fast replay.
> 
> i will check this and contact you if it is necessary.
> 
> thanks
> michael
> 
> Edwin Woudt schrieb:
>> --On 24-3-2006 8:54 +0100 Michael Seele <ms...@gu...> wrote:
>>> is there any chance to use the cryptix OpenPGP encryption engine without
>>> jce(that i must not copy the policity jar files into the jre) but with
>>> full key length?
>>>
>>> the problem is that we can't replace the jce jars on every pc where our
>>> application is running but we need "full" OpenPGP encryption...
>> Would it be possible to limit the keys to 2048 bit RSA keys and the 
>> encryption to Triple DES? If yes, then the standard policy files will do 
>> just fine.
>>
>> If not, you're out of luck. AFAIK, there is no open source project that 
>> provides what you need. There is a commercial product, the Hush 
>> Encryption Engine, that does work without any policy files:
>>
>> <http://www.hushmail.com/services-downloads>
>>
>> Note: I do not have any affiliation with hush.
>> Commercial plug: should they be very expensive, contact me privately, 
>> perhaps we can work something out.
>>
> 

-- 
G & H Softwareentwicklung GmbH     Tel.: +49(0)7451/53706-20
Robert-Bosch-Str. 23               Fax:  +49(0)7451/53706-90
D-72160 Horb a.N.                  http://www.guh-software.de

Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

[Edwin W. <ed...@wo...>]

--On 24-3-2006 1:40 -0800 Andreas Kuehne <ak...@ya...> wrote:
>
> wouldn't it be possible to use an existing open source JCE implementation
> and tweak out the restrictions ? But you would have to sign the
> restriction-free JCE own your own.

That would work just fine using the cleanroom implementation in Cryptix 
JCE, but the problem in this case is that you need to replace the JCE jar 
on the system. And if installing policy jars already is a problem, then 
replacing the JCE jar is also problematic.


-- 
Edwin

Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

[Andreas K. <ak...@ya...>]

Hi All,

wouldn't it be possible to use an existing open source JCE implementation and tweak out the restrictions ?
But you would have to sign the restriction-free JCE own your own.

Greetings

Andreas

----- Original Message ----
From: Michael Seele <ms...@gu...>
To: Edwin Woudt <ed...@wo...>
Cc: cry...@li...
Sent: Friday, March 24, 2006 10:05:20 AM
Subject: Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

thank you for your fast replay.

i will check this and contact you if it is necessary.

thanks
michael

Edwin Woudt schrieb:
> --On 24-3-2006 8:54 +0100 Michael Seele <ms...@gu...> wrote:
>>
>> is there any chance to use the cryptix OpenPGP encryption engine without
>> jce(that i must not copy the policity jar files into the jre) but with
>> full key length?
>>
>> the problem is that we can't replace the jce jars on every pc where our
>> application is running but we need "full" OpenPGP encryption...
> 
> Would it be possible to limit the keys to 2048 bit RSA keys and the 
> encryption to Triple DES? If yes, then the standard policy files will do 
> just fine.
> 
> If not, you're out of luck. AFAIK, there is no open source project that 
> provides what you need. There is a commercial product, the Hush 
> Encryption Engine, that does work without any policy files:
> 
> <http://www.hushmail.com/services-downloads>
> 
> Note: I do not have any affiliation with hush.
> Commercial plug: should they be very expensive, contact me privately, 
> perhaps we can work something out.
> 

-- 
G & H Softwareentwicklung GmbH     Tel.: +49(0)7451/53706-20
Robert-Bosch-Str. 23               Fax:  +49(0)7451/53706-90
D-72160 Horb a.N.                  http://www.guh-software.de


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Cryptix-Users mailing list
Cry...@li...
https://lists.sourceforge.net/lists/listinfo/cryptix-users

Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

[Michael S. <ms...@gu...>]

thank you for your fast replay.

i will check this and contact you if it is necessary.

thanks
michael

Edwin Woudt schrieb:
> --On 24-3-2006 8:54 +0100 Michael Seele <ms...@gu...> wrote:
>>
>> is there any chance to use the cryptix OpenPGP encryption engine without
>> jce(that i must not copy the policity jar files into the jre) but with
>> full key length?
>>
>> the problem is that we can't replace the jce jars on every pc where our
>> application is running but we need "full" OpenPGP encryption...
> 
> Would it be possible to limit the keys to 2048 bit RSA keys and the 
> encryption to Triple DES? If yes, then the standard policy files will do 
> just fine.
> 
> If not, you're out of luck. AFAIK, there is no open source project that 
> provides what you need. There is a commercial product, the Hush 
> Encryption Engine, that does work without any policy files:
> 
> <http://www.hushmail.com/services-downloads>
> 
> Note: I do not have any affiliation with hush.
> Commercial plug: should they be very expensive, contact me privately, 
> perhaps we can work something out.
> 

-- 
G & H Softwareentwicklung GmbH     Tel.: +49(0)7451/53706-20
Robert-Bosch-Str. 23               Fax:  +49(0)7451/53706-90
D-72160 Horb a.N.                  http://www.guh-software.de

Re: [Cryptix-users] A hypothetical question

[Edwin W. <ed...@wo...>]

--On 23-3-2006 8:29 -0500 Bob Corcoran <bco...@be...> wrote:
>
> Would there ever be a valid reason to PGP encrypt a file and then send it
> over an SSL connection? Or does the SSL session itself provide adequate
> security?

One reason would be if the PGP key and SSL key are controlled by different 
people or entities, or when the SSL key is more easily accessible (because 
it is stored unencrypted on the server for example).

Another reason would be when you need client authentication and SSL 
certificates are too much of a hassle.

So yes, there can be valid reasons.

-- 
Edwin

Re: [Cryptix-users] Use cryptix OpenPGP without jce policity

[Edwin W. <ed...@wo...>]

--On 24-3-2006 8:54 +0100 Michael Seele <ms...@gu...> wrote:
>
> is there any chance to use the cryptix OpenPGP encryption engine without
> jce(that i must not copy the policity jar files into the jre) but with
> full key length?
>
> the problem is that we can't replace the jce jars on every pc where our
> application is running but we need "full" OpenPGP encryption...

Would it be possible to limit the keys to 2048 bit RSA keys and the 
encryption to Triple DES? If yes, then the standard policy files will do 
just fine.

If not, you're out of luck. AFAIK, there is no open source project that 
provides what you need. There is a commercial product, the Hush Encryption 
Engine, that does work without any policy files:

<http://www.hushmail.com/services-downloads>

Note: I do not have any affiliation with hush.
Commercial plug: should they be very expensive, contact me privately, 
perhaps we can work something out.

-- 
Edwin

[Cryptix-users] Use cryptix OpenPGP without jce policity

[Michael S. <ms...@gu...>]

hi,

is there any chance to use the cryptix OpenPGP encryption engine without 
jce(that i must not copy the policity jar files into the jre) but with 
full key length?

the problem is that we can't replace the jce jars on every pc where our 
application is running but we need "full" OpenPGP encryption...

thanks
michael

-- 
G & H Softwareentwicklung GmbH     Tel.: +49(0)7451/53706-20
Robert-Bosch-Str. 23               Fax:  +49(0)7451/53706-90
D-72160 Horb a.N.                  http://www.guh-software.de 

Re: [Cryptix-users] unDashing messages

[Ian G <ia...@sy...>]

Jeroen van der Meer wrote:
> I use Cryptix for PGP Signing.
> It really works.
> There is a little problem.  When i sign a text mail the lines starting
> with dashes are modified by Cryptix. Does anyone  know what the reason
> is for this behavior.

So that the trailing signature is easy to find,
which starts with a '-----'.

> My Email client don't do that when the sign a
> text message ?
> 
> The class where it all happens
> 
> class PGPArmoury
> 
> /**
>      * Prefix all vulnerable lines with "- ".
>      * @param s text to be encoded
>      * @return dash-proteced text
>      */
>     public static String dashProtect(String s)

It is part of the standard for cleartext signing
in OpenPGP.  If your email client isn't doing it,
then it's not standard.  Try sending a signed
email of a signed piece of text and see what
happens.

[Cryptix-users] unDashing messages

[Jeroen v. d. M. <jer...@gm...>]

I use Cryptix for PGP Signing.
It really works.
There is a little problem.  When i sign a text mail the lines starting
with dashes are modified by Cryptix. Does anyone  know what the reason
is for this behavior. My Email client don't do that when the sign a
text message ?

The class where it all happens

class PGPArmoury

/**
     * Prefix all vulnerable lines with "- ".
     * @param s text to be encoded
     * @return dash-proteced text
     */
    public static String dashProtect(String s)

Greetings

Jeroen van der Meer
IT Consultant / J2EE Expert

[Cryptix-users] A hypothetical question

[Bob C. <bco...@be...>]

Would there ever be a valid reason to PGP encrypt a file and then send it
over an SSL connection? Or does the SSL session itself provide adequate
security?

Re: [Cryptix-users] How do you Compress when using EncryptedMessageOutputStream

[Edwin W. <ed...@wo...>]

> How can you turn on compression when using the Streamed Encryption?

No need, it already is compressed automatically.


> Will the Decryption detect that the data is compressed and decompress the
> data automatically?

Yes.

-- 
Edwin

[Cryptix-users] How do you Compress when using EncryptedMessageOutputStream

[Tom B. <To...@Pr...>]

I am a little new with this code, so please be patient. =20

=20

I am trying to add compression to the sample StreamEncryptSign.java
example program.  I checked the EncryptAndCompress program and it uses
the setAttribute method to turn on compression in the
EncryptedMesssageBuilder object.  However, StreamEncryptSign.java uses
EncryptedMessageOutputStream.  When I try to issue setAttribute with the
EncryptedMessageOutputStream object, I receive an
"IllegalArgumentException" exception. =20

=20

How can you turn on compression when using the Streamed Encryption?

Will the Decryption detect that the data is compressed and decompress
the data automatically?

=20

Thanks for your help.

=20

Tom

=20

[Cryptix-users] Problem with OpenPGP provider - > Algorithm not found. [KeyBundleFactory.OpenPGP]

[<raj...@si...>]

I am going through a problem in registering OpenPGP provider dynamically in solaris environment yet it is working fine in windows environment without any problem.

I have tried the but dint find the result. Please help me in this regard







// Shell Script to Set the Classpath on unix



#!/usr/bin/ksh

PATH=/usr/bin:

CLASSPATH=$CLASSPATH:/home/ak003830/Rajesh/java/temp/cryptix-jce-api.jar

CLASSPATH=$CLASSPATH:/home/ak003830/Rajesh/java/temp/cryptix-jce-provider.jar

CLASSPATH=$CLASSPATH:/home/ak003830/Rajesh/java/temp/cryptix-openpgp-provider.jar

CLASSPATH=$CLASSPATH:/home/ak003830/Rajesh/java/temp/cryptix-jce-compat.jar

CLASSPATH=$CLASSPATH:/home/ak003830/Rajesh/java/temp/cryptix-message-api.jar

CLASSPATH=$CLASSPATH:/home/ak003830/Rajesh/java/temp/cryptix-pki-api.jar

CLASSPATH=$CLASSPATH:/home/ak003830/Rajesh/jfiles



export CLASSPATH

javac -classpath $CLASSPATH CommandForm.java

java -classpath $CLASSPATH CommandForm

~





// when running the above script, java files getting compiled but generates below exception when the class file executes

   



bash-2.03$ . ../setenv.sh



*********************************************************************************************

*************** Welcome to Java Based OpenPGP Encryption Utility ***************

*********************************************************************************************

Select your Option



1. Create Public and Private Keys

2. Sign and Encrypt File

3. Verify and Decrypt File



Enter your selection : 1

Genearting the key's for bank



java.security.NoSuchAlgorithmException: Algorithm not found. [KeyBundleFactory.OpenPGP]

        at java.lang.Throwable.fillInStackTrace(Native Method)

        at java.lang.Throwable.fillInStackTrace(Compiled Code)

        at java.lang.Throwable.<init>(Compiled Code)

        at java.lang.Exception.<init>(Exception.java:35)

        at java.security.GeneralSecurityException.<init>(GeneralSecurityException.java:41)

        at java.security.NoSuchAlgorithmException.<init>(NoSuchAlgorithmException.java:38)

        at cryptix.pki.Support.getImplementation(Compiled Code)

        at cryptix.pki.KeyBundleFactory.getInstance(KeyBundleFactory.java:67)

        at GenerateAndWriteKeyBank.generateComplexKey(GenerateAndWriteKeyBank.java:274)

        at GenerateAndWriteKeyBank.<init>(GenerateAndWriteKeyBank.java:81)

        at CommandForm.main(CommandForm.java:31)





if I am restricting below mentioned lines by putting "// " the same error appears on windows environment also



 java.security.Security.addProvider(new cryptix.jce.provider.CryptixCrypto() );

 java.security.Security.addProvider(new cryptix.openpgp.provider.CryptixOpenPGP() );



Please suggest me how to rectify this issue.



Rajesh