Java ports to LINUX: How good is crypto implementation?

Thread view:

Michel Gallant - 02 Apr 2004 17:25 GMT

Any good recent summaries of Java ports to linux OS?
How good are the crypto implementations therein?
specifically how good are the crypto RNG s?

- Mitch Gallant
www.jensign.com

Reply to this Message

Lothar Kimmeringer - 03 Apr 2004 19:28 GMT

> Any good recent summaries of Java ports to linux OS?

SUN's good, Blackdown's good, IBM's good. What exactly
do you want to know?

> How good are the crypto implementations therein?

The crypto-implementations should be pure Java, so I
don't see where there should be a big difference to
the implementations on other systems.

Regards, Lothar

Signature

Lothar Kimmeringer E-Mail: spamfang@kimmeringer.de
PGP-encrypted mails preferred (Key-ID: 0x8BC3CD81)

Always remember: The answer is forty-two, there can only be wrong
questions!

Reply to this Message

Michel Gallant - 03 Apr 2004 19:55 GMT

Any significant differences in implementation of entropy
in random number generators?
Implementation differences in RSA prime derivations?
Including of crypto extensions like PKCS support etc...

Thanks,
- Mitch

> > Any good recent summaries of Java ports to linux OS?
>
[quoted text clipped - 8 lines]
>
> Regards, Lothar

Reply to this Message

Lothar Kimmeringer - 04 Apr 2004 23:04 GMT

> Implementation differences in RSA prime derivations?
> Including of crypto extensions like PKCS support etc...

They all use the same jar, so they are technically
no differences. The prime-derivation for RSA is AFAIK
the corresponding constructor in java.math.BigInteger,
so you can have a look for yourself as it's source is
shipped with every JDK.

Regards, Lothar

Signature

Lothar Kimmeringer E-Mail: spamfang@kimmeringer.de
PGP-encrypted mails preferred (Key-ID: 0x8BC3CD81)

Always remember: The answer is forty-two, there can only be wrong
questions!

Reply to this Message

Ove Ranheim - 03 Apr 2004 20:02 GMT

You're "Michel Gallant", right. Not to be rude or anything, but at your
site it says,

"(JavaScience as Icon) - Michel I. Gallant Ph.D. has over 20 years
experience in the telecommunications industry. He has worked as a senior
photonic designer, as a security analyst and architect in a major
Canadian telecommunications corporation. He was awarded an MVP in
Security for 2003, 2004."

Well Java can be pretty nice installed on lots of platforms :) Including
Linux for quite some time now. And it seems you got some experience in
crypto including client .NET design.

Well, you should know better than post such ridiculous postings, or
please rephrase your questions.

Why don't you read a little in Sun's JDK, and to peek it out for you, it
ships with JCE (java crypto extensions) and a free implementation of
that one is fx. Cryptix. You may even read the specs of it at jcp.org.

Java is about interoperability! It's there - you might just use it :)

-OR

> Any good recent summaries of Java ports to linux OS?
> How good are the crypto implementations therein?
> specifically how good are the crypto RNG s?
>
> - Mitch Gallant
> www.jensign.com

Reply to this Message

Dave Ockwell-Jenner - 22 Apr 2004 14:17 GMT

> You're "Michel Gallant", right. Not to be rude or anything, but at your
> site it says,

[snip]

I think Michel knows what he's on about... having been at the same major
telecommunications corporation for a while, I had the pleasure of his
wisdom several times :)

> Well, you should know better than post such ridiculous postings, or
> please rephrase your questions.

My guess would be that the OP is looking to see if the JVM
implementation makes any difference to the quality of the Java Crypto
libraries. Whilst the crypto implementation may be in pure Java, does
it rely on anything specific in the JVM (which in turns relies on the
underlying OS).

Signature

Dave Ockwell-Jenner
Solar Nexus Solutions
http://www.solar-nexus.com/

Reply to this Message

Michel Gallant - 22 Apr 2004 20:33 GMT

Hey Dave :-)

Yeah, you have the flavour of what I was trying to say.
BTW, does LINUX have something similar to Windows native
WFP (Windows File Protection) monitoring??
(please don't say .. "Linux doesn't need that type of protection" !

Best,
- Mitch @ www.jensign.com

"Whoever you are, I have always depended on the kindness of strangers"

> > You're "Michel Gallant", right. Not to be rude or anything, but at your
> > site it says,
[quoted text clipped - 13 lines]
> it rely on anything specific in the JVM (which in turns relies on the
> underlying OS).

Reply to this Message

chris - 23 Apr 2004 17:51 GMT

> Hey Dave :-)
>
> Yeah, you have the flavour of what I was trying to say.
> BTW, does LINUX have something similar to Windows native
> WFP (Windows File Protection) monitoring??
> (please don't say .. "Linux doesn't need that type of protection" !

That would be tripwire, no?

Signature

Chris Gray chris@kiffer.eunet.be
/k/ Embedded Java Solutions

Reply to this Message

Java ports to LINUX: How good is crypto implementation?

Free Magazines