Cryptix JCE for Java 1.4 Released
Yoda2 writes "A new snapshot of the Cryptix Java Cryptography Extensions (JCE) API was released on the Cryptix.org site yesterday. You can download the file here. Among other things, this finally allows for PGP encryption/decryption of files from the Java JDK 1.4 when used in conjunction with Cryptix OpenPGP."
The Cryptix site was actually updated since my submission to announce an updated snapshot of OpenPGP. You can download it here.
I'm glad to see this is finally making progress (at least their OpenPGP implementation is no longer a developer's release...), but I imagine it'll be a while yet until it's ready for commercial use. Unfortunately, it's the only game going for Java-based PGP (except for some API out of China). This leaves me doing some rather tacky things to use GPG in a commercial environment. Why is it that there's so little interest in a real Java API for PGP?
Take note of this... until now, there were no open source implementations of the JCE that ran under JDK 1.4. Sun's implementation does not have source available, and they even went the extra step to obfuscate their JCE with DashO-Pro. Transparency is vital to cryptography, as anything less casts a shadow of doubt.
Just my humble opinion...
I predict a stunning lack of impact in the Java using world -- people will continue using insecure storage and protocols and plaintext all over the place.
Developers *like* features. They have to have security *forced* upon them.
May we never see th
I was under the impression that the BouncyCastle license was less than free, but I was mistaken. It is a great package, and it's good to know that there are a variety of open implementations of strong crypto under Java.