[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bouncycastle-crypto-dev
Subject:    RE: [dev-crypto] Java keystore using bouncy castle
From:       "Mohan Radhakrishnan" <mohanr () fss ! co ! in>
Date:       2010-08-13 6:43:41
Message-ID: 0EE14841E1FD8545B7E084F22AEF96810357B123 () fssbemail ! fss ! india
[Download RAW message or body]

Hi,
       We are using Java keystores. I though that bouncy castle has some
keystores which have more facilities.

"The second, Keystore.BouncyCastle, or Keystore.UBER will only work with
the keytool if the password is provided on the command line, as the
entire keystore is encrypted with a PBE based on SHA1 and Twofish
(PBEWithSHAAndTwofish-CBC). This makes the entire keystore resistant to
tampering and inspection, and forces verification. The Sun JDK provided
keytool will attempt to load a keystore even if no password is given,
this is impossible for this version. (One might wonder about going to
all this trouble and then having the password on the command line! New
keytool anyone?)."

Couldn't locate any examples ?

Thanks,
Mohan

-----Original Message-----
From: Arshad Noor [mailto:arshad.noor@strongauth.com] 
Sent: Friday, August 13, 2010 8:25 AM
To: Mohan Radhakrishnan
Cc: dev-crypto@bouncycastle.org
Subject: Re: [dev-crypto] Java keystore using bouncy castle

Link should have been:

http://download.oracle.com/javase/6/docs/api/java/security/KeyStore.html

but I imagine most people figured that out by now.
Sorry about that.


Arshad Noor wrote:
> This is the standard Java Keystore (JKS) that is part of JCE.
> JKS files are portable across all JCE providers.  They are
> capable of storing Public, Private and symmetric cryptographic
> keys.
> 
> http://download.oracle.com/javase/6/docs/api/
> 
> Arshad Noor
> StrongAuth, Inc.
> 
> Mohan Radhakrishnan wrote:
>> Hi,
>>
>>          I know that there is a type of Java keystore that can store 
>> AES keys. Is there any such facility in bouncy castle ?
>>


[prev in list] [next in list] [prev in thread] [next in thread]