Re: [Cryptix-users] caught between - Unsupported keysize / Jurisdiction policy files are not signed

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Srini,

It definitely looks like an issue with the juridiction files.  Are you
running AIX?  If so, the problem could be that you need the IBM SDK
policy files.  You can find those here:
https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk

Also, it looks like you are trying to use the Sun JCE provider with the
Cryptix OpenPGP implementation.  Not sure if this matters, but you could
try using the Cryptix JCE implementation and the CryptixCrypto provider.
I'm doing this in my applications just to (presumably) ensure
compatibility.

Mike

----- Original Message ----- 
From: <CH...@Na...>
To: "Edwin Woudt" <ed...@wo...>
Cc: <cry...@li...>
Sent: Thursday, December 22, 2005 2:52 PM
Subject: RE: [Cryptix-users] caught between - Unsupported keysize /
Jurisdiction policy files are not signed

> Hi Edwin, it would be a great help, if you could answer my  problem.
>
> Regards
> Srini
>
>
> Can i get any more lucky...???
> Thanks
> Srini
>
> ----- Forwarded by Srinivas Chintakindi/XTL/NWIE on 12/16/2005 09:41
AM
> -----
>
> cry...@li... wrote on 12/15/2005 04:52:33
PM:
>
> > cry...@li...
> >
> >
> > > jars are copied to  runtimes\base_v51\java\jre\lib\security,
> > > I followed the installation process explained in the readme.txt
and
> > > i am running the examples in RAD.
> > >
> > > Thanks for following up promptly !!!
> > > Srini
> > >
> > > "Bob Corcoran" <bco...@be...>
> > > RE: [Cryptix-users] caught between - Unsupported keysize /
> > > Jurisdiction policy files are not signed
> > >
> > > Where did you put the two jar files?
> > >
> > > -----Original Message-----
> > > From: cry...@li...
> > > [mailto:cry...@li...] On Behalf Of
> > > CH...@Na...
> > > Sent: Thursday, December 15, 2005 3:45 PM
> > > To: Bob Corcoran; cry...@li...
> > > Subject: RE: [Cryptix-users] caught between - Unsupported keysize
/
> > > Jurisdiction policy files are not signed
> > >
> > > Yes, from  "http://java.sun.com/j2se/1.4.2/download.html"
> > > Thanks
> > > Srini
> > >
> > >
> > >
> > > Did you get the Unlimited Strength Jurisdiction Policy Files from
Sun?
> > >
> > > -----Original Message-----
> > > From: cry...@li...
> > > [mailto:cry...@li...] On Behalf Of
> > > CH...@Na...
> > > Sent: Thursday, December 15, 2005 3:29 PM
> > > To: cry...@li...
> > > Subject: [Cryptix-users] caught between - Unsupported keysize /
> > Jurisdiction
> > > policy files are not signed
> > >
> > >
> > > Hi All, I am new to the encryption world. Going through Cryptix
last
> > couple
> > > of days.
> > >
> > > My need is to get my data encrypted with PGP encryption. Can I
just get
> > this
> > > done with out using any third party api?
> > > I am intending to achieve PGP encryption by using SunJCE provider?
> > examples
> > > would help a lot.
> > >
> > > I tried to run the Cryptix examples on jre 1.4.2, 1. when i run
the
> > > GenerateAndWriteKey.java with "Strong" but  limited crypto it
works
> fine.
> > > But when I switch to  "unlimited strength" cryto I am getting
following
> > > errors
> > >
> > > Exception in thread "main" java.lang.ExceptionInInitializerError
> > >       at javax.crypto.Cipher.a(Unknown Source)
> > >       at javax.crypto.Cipher.getInstance(Unknown Source)
> > >       at
> > >
> >
>
cryptix.openpgp.algorithm.PGPAlgorithmFactory.getCipherAlgorithm(PGPAlgo
rith
>
>
> >
> > >
> > > mFactory.java:675)
> > >       at
> > cryptix.openpgp.packet.PGPKeyPacket.encrypt(PGPKeyPacket.java:426)
> > >       at
> > >
> >
>
cryptix.openpgp.provider.PGPKeyBundleImpl.addPrivateKey(PGPKeyBundleImpl
.jav
>
>
> >
> > >
> > > a:340)
> > >       at
> > >
> >
>
cryptix.openpgp.examples.GenerateAndWriteKey.generateSimpleKey(GenerateA
ndWr
>
>
> >
> > >
> > > iteKey.java:244)
> > >       at
> > >
> >
>
cryptix.openpgp.examples.GenerateAndWriteKey.main(GenerateAndWriteKey.ja
va:8
>
>
> >
> > >
> > > 9)
> > > Caused by: java.lang.SecurityException: Cannot set up certs for
trusted
> > CAs
> > >       at javax.crypto.e.<clinit>(Unknown Source)
> > >       ... 7 more
> > > Caused by: java.lang.SecurityException: Jurisdiction policy files
are
> not
> > > signed by trusted signers!
> > >       at javax.crypto.e.a(Unknown Source)
> > >       at javax.crypto.e.a(Unknown Source)
> > >       at javax.crypto.e.g(Unknown Source)
> > >       at javax.crypto.f.run(Unknown Source)
> > >       at java.security.AccessController.doPrivileged1(Native
Method)
> > >       at
> > >
java.security.AccessController.doPrivileged(AccessController.java:351)
> > >       ... 8 more
> > >
> > >
> > > 2. With the Keys generated using "Strong" encryption, if I run
> > Encrypt.java
> > > I am getting following error.
> > > Exception in thread "main" java.lang.SecurityException:
Unsupported
> > keysize
> > > or algorithm parameters
> > >       at javax.crypto.Cipher.init(Unknown Source)
> > >       at
> > >
> >
>
cryptix.openpgp.packet.PGPEncryptedDataPacket.encrypt(PGPEncryptedDataPa
cket
>
>
> >
> > >
> > > .java:356)
> > >       at
> > >
> >
>
cryptix.openpgp.provider.PGPEncryptedMessageBuilder.engineBuild(PGPEncry
pted
>
>
> >
> > >
> > > MessageBuilder.java:381)
> > >       at
> > >
> >
>
cryptix.message.EncryptedMessageBuilder.build(EncryptedMessageBuilder.ja
va:2
>
>
> >
> > >
> > > 53)
> > >       at cryptix.openpgp.examples.Encrypt.main(Encrypt.java:130)
> > > please let me know what am i missing ???
> > >
> > > thanks in advance
> > > Srini
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log
> files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD
SPLUNK!
> http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Cryptix-Users mailing list
> Cry...@li...
> https://lists.sourceforge.net/lists/listinfo/cryptix-users
>
>
>
>
>                    Edwin Woudt
>                    <edwin@woudt.
>                    nl>
From
>                                          Edwin Woudt <ed...@wo...>
>                    Sent by:
To
>                    cryptix-users         Pavlin Masliankov
>                    -admin@lists.         <mas...@ya...>,
>                    sourceforge.n
cry...@li....n
>                    et                    et
>
cc
>
>
Subject
>                                          Re: [Cryptix-users] Some
>                    12/22/2005            questions about the
>                    02:37 PM              development/support of the
>                                          library
>
>
>
>
>
>
>
>
>
>
> > So I will be very grateful if I receive the contacts
> > of the person who is responsible for the development
> > of the library.
> > I see that on the cryptix mailing list page is written
> > that "Cryptix-Users list run by
> > wo...@us... " . Is this one of the
> > emails of the moderators or people responsible for the
> > project ?
>
> That's me :)
>
> I am the main developer for Cryptix OpenPGP and I can apply any of
your
> patches for Cryptix OpenPGP/JCE to the CVS repository.
>
> The CVS repository is hosted at sourceforge. For Cryptix OpenPGP:
>   <http://sourceforge.net/cvs/?group_id=21420>
>
> For Cryptix JCE (and all older stuff):
>   <http://sourceforge.net/cvs/?group_id=21163>
>
> You should be able to use anonymous CVS. Let me know if you encounter
any
> problems.
>
> Feel free to mail me privately any patches or questions you may have,
as
> the development is somewhat inappropriate for this list. I can be
reached
> at ed...@wo..., ed...@cr... or wo...@us...
>
> --
> Edwin
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log
> files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD
SPLUNK!
> http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Cryptix-Users mailing list
> Cry...@li...
> https://lists.sourceforge.net/lists/listinfo/cryptix-users
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD
SPLUNK!
> http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Cryptix-Users mailing list
> Cry...@li...
> https://lists.sourceforge.net/lists/listinfo/cryptix-users