quickfix-developers

[Quickfix-developers] Encryption

[Jon D. <jd...@Li...>]

Hello all,

I have a question about encryption in general with FIX and somewhat with =
quickfix.

Is anyone encrptying their FIX messages right now and how has the =
process been of
encrypting and decryting from either side?=20

Any gotchas out there with the FIX protocol and excryption?

I was thinking about using the OpenSSL library so we can write one code =
base (for the most part)
and run it on *NIX and Windows. Anyone use the same scenario.

Will quickfix offer any encryption plugins in the future?


Sorry if this is somewhat off topic.

Thanks,

JD

[Quickfix-developers] Encryption

[<an...@rh...>]

Does QuickFIX support encryption or do I need to use something like
stunnel?  If the latter is the case;  are there any good
samples/documentation of implementing it?  Any recommendations for the
best encryption tool to use? (Stunnel or another).
=20
Thank you,
=20
Andy Mareska
=20

Re: [Quickfix-developers] Encryption

[Joerg T. <Joe...@ma...>]

an...@rh... wrote:
> Does QuickFIX support encryption or do I need to use something like
> stunnel?  If the latter is the case;  are there any good
> samples/documentation of implementing it?  Any recommendations for the
> best encryption tool to use? (Stunnel or another).

At moment, QuickFIX does not implement any encryption mechanism, neither encrypted or 
signed data fields/messages nor an SSL layer.

But since version 1.5 binary data fields containing any character including the field 
delimiter are supported, so you can store/retrieve encrypted binary data if you implement 
the encryption methods yourself.

If you want to encrypt the transport layer, stunnel is probably the easiest approach. 
Personally, I have no experience in using it, but others in this mailing list may have it.

It would be good to have SSL based socket acceptors/initiators, but there are none in the 
current QF code base. Jon Dahl asked some questions in the list in 2003; I am not aware of 
further efforts/implementations other QF users may have.

See also these links on the FPL site:

* http://www.fixprotocol.org/specifications/TechDoc-InfoSecurity
* http://fixprotocol.org/discuss/read/9ca77960

The latter thread contains the excellent posting of Ryan Pierce, leader of the "Global 
Technical Information Security" sub-committee of FPL.

HTH

Cheers, Jörg

-- 
Joerg Thoennes
                                http://macd.com
Tel.: +49 (0)241 44597-24      Macdonald Associates GmbH
Fax : +49 (0)241 44597-10      Lothringer Str. 52, D-52070 Aachen

Re: [Quickfix-developers] Encryption

[Oren M. <or...@qu...>]

I know several people have used Stunnel for encryption.  My  
understanding is that Stunnel runs out of process and acts as a  
proxy.  So you just need to set up Stunnel as directed and set up the  
QF config files to connect to it (or have it forward requests to you  
if you are the acceptor).  Except for that i don't think you need to  
do anything special with QF.

--oren

On Jun 10, 2005, at 6:11 AM, <an...@rh...> wrote:

> Does QuickFIX support encryption or do I need to use something like  
> stunnel?  If the latter is the case;  are there any good samples/ 
> documentation of implementing it?  Any recommendations for the best  
> encryption tool to use? (Stunnel or another).
>
>
>
> Thank you,
>
>
>
> Andy Mareska
>
>
>
>

[Quickfix-developers] Re: Encryption

[Barry K. <gr...@me...>]

I am nearly finished porting the network layer of quickfixj from netty to mina. Mina supports SSL transparently. Once I finish up I'll modify one of the examples to use SSL.

-barry

an...@rh... wrote:
> Does QuickFIX support encryption or do I need to use something like 
> stunnel?  If the latter is the case;  are there any good 
> samples/documentation of implementing it?  Any recommendations for the 
> best encryption tool to use? (Stunnel or another).
> 
>  
> 
> Thank you,
> 
>  
> 
> Andy Mareska
> 
>  
> 


-- 
barry kaplan
gr...@me...

Re: [Quickfix-developers] Encryption

[Oren M. <ore...@ya...>]

Version 1.5 is the first version that theoritically would support encryption of fields, so you will probably be among the first to try this.  The first go at this was simply to allow you get/set encrypted values into fields.  You need to manually set the length before you send messages.  You will also need to decrypt the fields after you pull the data out since their are no encryption hooks at this point.  The other thing I think you have to do is manually indicate which fields you have encrypted etc.  I believe there is a field in the header for this.
 
We do plan on providing more integrated encryption in the future, but you should be able to do what you want with 1.5, even if it is a little ugly.

Jon Dahl <jd...@Li...> wrote:
Hello all,

I have a question about encryption in general with FIX and somewhat with quickfix.

Is anyone encrptying their FIX messages right now and how has the process been of
encrypting and decryting from either side? 

Any gotchas out there with the FIX protocol and excryption?

I was thinking about using the OpenSSL library so we can write one code base (for the most part)
and run it on *NIX and Windows. Anyone use the same scenario.

Will quickfix offer any encryption plugins in the future?


Sorry if this is somewhat off topic.

Thanks,

JD


-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Quickfix-developers mailing list
Qui...@li...
https://lists.sourceforge.net/lists/listinfo/quickfix-developers

---------------------------------
Do you Yahoo!?
Free online calendar with sync to Outlook(TM).