Nabble - Bouncy Castle

tag:old.nabble.com,2006:forum-943 Nabble - Bouncy Castle 2009-12-09T06:30:52Z Bouncy Castle Crypto APIs. Bouncy Castle home is <a href="http://www.bouncycastle.org/" target="_top" rel="nofollow">here</a>. tag:old.nabble.com,2006:post-26711150 Problem with decryption keys DSA 2009-12-09T06:30:52Z 2009-12-09T06:30:52Z rizzo Hi. <br>I have to decrypt, with Bouncy Castle, a file signed and encrypted with PGP <br>v. 6.5.8. <br><br>I get the following error message: <br><br>... <br>org.bouncycastle.openpgp.PGPException: invalid key <br>Underlying exception: java.security.InvalidKeyException: can't recognise <br>key <br>type in DSA based signer. <br><br>As well not recognize a DSA key, right? How can I fix this? <br><br>Thanks in advance. <br>Regards. <br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26711026 Problema di decrittografia con chiave DSA 2009-12-09T06:23:49Z 2009-12-09T06:23:49Z rizzo Hi. <br>I have to decrypt, with Bouncy Castle, a file signed and encrypted with PGP <br>v. 6.5.8. <br><br>I get the following error message: <br><br>... <br>org.bouncycastle.openpgp.PGPException: invalid key <br>Underlying exception: java.security.InvalidKeyException: can't recognise key <br>type in DSA based signer. <br><br>As well not recognize a DSA key, right? How can I fix this? <br><br>Thanks in advance. <br>Regards. <br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26706148 Symmetric session key 2009-12-08T23:24:10Z 2009-12-08T23:24:10Z Mathias Berg Hi, i need some assist regarding using Bouncy castle API for encryption. <br><br>My goal is to encrypt a xml file using public and private key (RSA). I <br>got the public key and receiver has the private. All is good. <br>But, i heard now that i need to create a session key (AES, 256bit) and <br>with this encrypt the xml. Then encrypt the session key using the <br>public key. <br><br>Problem now is, how do i do this with BC api. I made som code already, <br>but im not sure if im doing it right. <br><br>[code] <br>... <br><br>CMSProcessable content = new <br>CMSProcessableByteArray("Helloooooo".getBytes("UTF-8")); <br>CMSEnvelopedDataGenerator fact = new CMSEnvelopedDataGenerator(); <br>fact.addKeyTransRecipient(reciverCert); <br>CMSEnvelopedData envData = fact.generate(content, <br>CMSEnvelopedDataGenerator.AES256_CBC, 256, "BC"); <br><br>return envData.getEncoded(); <br><br>... <br>[/code] <br><br>In this code i send in a keysize of 256. And if im not wrong it will <br>create a key from KeyGenerator. <br>[code] <br>fact.generate(content, CMSEnvelopedDataGenerator.AES256_CBC, 256, "BC"); <br>[/code] <br><br>So is the session key gen. from the keyGenerator and later used for <br>encryption in CMSEnvelopedDataGenerator? <br><br>Do the reciever need to know anything of this, if they also use BC for decrypt? <br><br>Many thanxs for your time. <br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26672960 ECIES keystore 2009-12-06T22:04:16Z 2009-12-06T22:04:16Z polaris777 I use bouncycastle API support for ECIES for secret key exchange under J2ME environment and it works properly at mobile side (using emulator). The following code is example provided by BC. <br><br><br>//////////////////////////////////////////////////////////////////////////////////////////////////////////////////// <br><br>ECCurve.Fp curve = new ECCurve.Fp( <br>new BigInteger("6277101735386680763835789423207666416083908700390324961279"), // q <br>new BigInteger("fffffffffffffffffffffffffffffffefffffffffffffffc", 16), // a <br>new BigInteger("64210519e59c80e70fa7e9ab72243049feb8deecc146b9b1", 16)); // b <br><br>ECDomainParameters params = new ECDomainParameters( <br>curve, <br>curve.decodePoint(Hex.decode("03188da80eb03090f67cbf20eb43a18800f4ff0afd82ff1012")), // G <br>new BigInteger("6277101735386680763835789423176059013767194773182842284081")); // n <br><br>ECPrivateKeyParameters priKey = new ECPrivateKeyParameters( <br>new BigInteger("651056770906015076056810763456358567190100156695615665659"), // d <br>params); <br><br>ECPublicKeyParameters pubKey = new ECPublicKeyParameters( <br>curve.decodePoint(Hex.decode("0262b12d60690cdcf330babab6e69763b471f994dd702d16a5")), // Q <br>params); <br><br>AsymmetricCipherKeyPair p1 = new AsymmetricCipherKeyPair(pubKey, priKey); <br>AsymmetricCipherKeyPair p2 = new AsymmetricCipherKeyPair(pubKey, priKey); <br><br>// <br>// stream test <br>// <br>IESEngine i1 = new IESEngine( <br>new ECDHBasicAgreement(), <br>new KDF2BytesGenerator(new SHA1Digest()), <br>new HMac(new SHA1Digest())); <br>IESEngine i2 = new IESEngine( <br>new ECDHBasicAgreement(), <br>new KDF2BytesGenerator(new SHA1Digest()), <br>new HMac(new SHA1Digest())); <br>byte[] d = new byte[] { 1, 2, 3, 4, 5, 6, 7, 8 }; <br>byte[] e = new byte[] { 8, 7, 6, 5, 4, 3, 2, 1 }; <br>IESParameters p = new IESParameters(d, e, 64); <br><br>i1.init(true, p1.getPrivate(), p2.getPublic(), p); <br>i2.init(false, p2.getPrivate(), p1.getPublic(), p); <br><br>byte[] message = Hex.decode("1234567890abcdef"); <br><br>byte[] out1 = i1.processBlock(message, 0, message.length); <br><br>if (!areEqual(out1, Hex.decode("2442ae1fbf90dd9c06b0dcc3b27e69bd11c9aee4ad4cfc9e50eceb44"))) <br>{ <br>fail("stream cipher test failed on enc"); <br>} <br><br>byte[] out2 = i2.processBlock(out1, 0, out1.length); <br><br>if (!areEqual(out2, message)) <br>{ <br>fail("stream cipher test failed"); <br>} <br>//////////////////////////////////////////////////////////////////////////////////////////////////////////////////// <br><br>what I need now is to store the generated public/private objects(ECPublicKeyParameters/ECPrivateKeyParameters) in keystore and then generate a certificate for mobile side to be used to encrypt secret key. I have two initial solutions: <br><br>1-create EC keystore using keytool UI with BKS extension and retrieve it by my code (the problem here I can't get bouncycastleProvider because it doesn’t exist in J2ME version of BC API). <br><br>2-serialize public and private key objects into file (I don't know if I can serialize ECPublicKeyParameters/ECPrivateKeyParameters objects under J2ME and if I can deserialize them to be used by application) <br><br>There is a class in bouncycastle called PKCS1Encoding but I don't know if I can use it for this purpose or not <br><br><br>Im completely lost please help. <br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26656956 R: Problem PGP 6.5.8 vs Bouncy Castle 2009-12-05T08:19:53Z 2009-12-05T08:19:53Z rizzo Hi! <br>I managed to know that the problem in BC with the decryption occurs with the <br>method "ops.initVerify". <br><br>This is the part of the code relating to: <br><br>      PGPOnePassSignature ops = .....; <br><br>      ops.initVerify (verificationKey, "BC"); <br><br>It seems that the problem is in reading the "verificationKey" which is a <br>PGPPublicKey. <br><br>Someone would know me out in understanding the problem? <br><br>Thanks. <br>Regards <br><div class='shrinkable-quote'><br>>----Messaggio originale---- <br>>Da: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26656956&i=0" target="_top" rel="nofollow">niloinf@...</a> <br>>Data: 04/12/2009 11.31 <br>>A: <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26656956&i=1" target="_top" rel="nofollow">dev-crypto@...</a>> <br>>Ogg: [dev-crypto] Problem PGP 6.5.8 vs Bouncy Castle <br>> <br>>Hi! <br>> <br>>I would need your help. <br>> <br>>I was sent an encrypted file with PGP 6.5.8, but I can not decrypt / </div>verify <br>>the signature of that file. The software used to decrypt is the owner, so <br>the <br>>error message is not very explicit: it only says "Error while initializing <br>the <br>>verification process." <br>>I'm just aware that the sender has a pair of keys (generated with PGP <br>6.5.8 <br>>with IDEA cipher), while the decryption software should use the libraries <br>of <br>>the Bouncy Castle (I think version 1.38). <br>> <br>>Somebody would know to give me some suggestions? <br>> <br>>Thanks in advance. <br>>Regards <br>> <br>> <br><br><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26640665 Problem PGP 6.5.8 vs Bouncy Castle 2009-12-04T02:31:36Z 2009-12-04T02:31:36Z rizzo Hi! <br><br>I would need your help. <br><br>I was sent an encrypted file with PGP 6.5.8, but I can not decrypt / verify <br>the signature of that file. The software used to decrypt is the owner, so the <br>error message is not very explicit: it only says "Error while initializing the <br>verification process." <br>I'm just aware that the sender has a pair of keys (generated with PGP 6.5.8 <br>with IDEA cipher), while the decryption software should use the libraries of <br>the Bouncy Castle (I think version 1.38). <br><br>Somebody would know to give me some suggestions? <br><br>Thanks in advance. <br>Regards <br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26633119 Re: Creating PGPPublicKey from encoded key text 2009-12-03T12:56:59Z 2009-12-03T12:56:59Z David Hook-2 <br>How is the text generated? If it's a PGP encoding it should still be <br>treated as a key ring file (it just happens to have only a lone key in <br>it). <br><br>Regards, <br><br>David <br><br>On Thu, 2009-12-03 at 10:17 -0800, Chuck Matthews wrote: <div class='shrinkable-quote'><br>> Good afternoon, <br>> <br>> Please forgive my ignorance, but I am working on my first encryption <br>> assignment. <br>> <br>> I'll get right to it....... <br>> <br>> What are the steps to create a PGPPublicKey directly from encoded key <br>> text? This is for an ERP system and the key text will be persisted for <br>> each customer, without using a key ring. All I can seem to find are <br>> solutions utilizing a key ring. Can I do it without a key ring? <br>> <br>> Thanks in advance for your help, <br>> <br>> Chuck </div><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26633071 Re: What's difference PGPSignature.DEFAULT_CERTIFICATION, POSITIVE, CASUAL and NO_CERTIFICATION? 2009-12-03T12:52:04Z 2009-12-03T12:52:04Z David Hook-2 <br><a href="http://www.ietf.org/rfc/rfc4880.txt" target="_top" rel="nofollow">http://www.ietf.org/rfc/rfc4880.txt</a><br><br>Regards, <br><br>David <br><br>On Thu, 2009-12-03 at 16:53 +0300, Mike Baikov wrote: <br>> Hello, <br>> <br>> I'm can't find information about it :( <br>> <br>> Thanks for answers. <br><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26633018 Re: Help reading and decrypting from a signed Data file 2009-12-03T12:50:58Z 2009-12-03T12:50:58Z David Hook-2 <br>You need to pick up the signed data at the point where you are calling <br>drain() and not use the drain method. <br><br>Regards, <br><br>David <br><br>On Thu, 2009-12-03 at 12:16 +0100, Andrea Paternesi wrote: <div class='shrinkable-quote'><br>> Good mornig, <br>> <br>> i am new here. <br>> I am writing some code to try to decrypt a SignedData signed file. <br>> Anyway i cannot read the data from the signed file. <br>> I attach the code below. <br>> <br>> try { <br>>             File file = new File(path); <br>>             FileInputStream fis = new FileInputStream(file); <br>> <br>>             BufferedInputStream bis = new BufferedInputStream(fis, 640000); <br>>             CMSSignedDataParser sp = new CMSSignedDataParser(bis); <br>>             sp.getSignedContent().drain(); <br>> <br>>             certs = sp.getCertificatesAndCRLs("Collection", "BC"); <br>>             SignerInformationStore signers = sp.getSignerInfos(); <br>> <br>>             Collection c = signers.getSigners(); <br>>             it = c.iterator(); <br>> <br>>             while (it.hasNext()) { <br>>                 SignerInformation signer = (SignerInformation) it.next(); <br>>                 Collection certCollection = certs.getCertificates(signer.getSID()); <br>> <br>>                 Iterator certIt = certCollection.iterator(); <br>>                 X509Certificate cert = (X509Certificate) certIt.next(); <br>> <br>>                 System.out.println("Name: " + cert.getIssuerDN().getName()); <br>>                 System.out.println("Name: " + cert.getSubjectDN().toString()); <br>>                 System.out.println("verify returns: " + signer.verify(cert, "BC")); <br>> <br>>                 InputStream ins = sp.getSignedContent().getContentStream(); <br>> <br>>                 CMSSignedData signedData = new CMSSignedData(ins); <br>>                 Object content = signedData.getSignedContent().getContent(); <br>>                 byte[] b = (byte[]) content; <br>> <br>> <br>>                 int numread = 0; <br>>                 byte[] bytes = new byte[8192]; <br>>                 FileOutputStream fos = new FileOutputStream("/home/patton/p7m/new.txt"); <br>>                 while ((numread = ins.read(bytes))> 0) { <br>>                 fos.write(b, 0,numread); <br>>                 } <br>>                 fos.close(); <br>>                 ins.close(); <br>>             } <br>>         } catch (Exception e) { <br>>             e.printStackTrace(); <br>>         } <br>> <br>> The problem is that i get alway a Stream Closed exception. So i cannot read the signed Data. <br>> <br>> org.bouncycastle.cms.CMSException: IOException reading content. <br>>         at org.bouncycastle.cms.CMSUtils.readContentInfo(Unknown Source) <br>>         at org.bouncycastle.cms.CMSUtils.readContentInfo(Unknown Source) <br>>         at org.bouncycastle.cms.CMSSignedData.<init>(Unknown Source) <br>>         at provasmartcard.ProvaLetturaP7M.leggip7m(ProvaLetturaP7M.java:109) <br>>         at provasmartcard.ProvaLetturaP7M.main(ProvaLetturaP7M.java:58) <br>> Caused by: java.io.IOException: Stream closed <br>>         at java.io.BufferedInputStream.getBufIfOpen(BufferedInputStream.java:145) <br>>         at java.io.BufferedInputStream.read(BufferedInputStream.java:308) <br>>         at org.bouncycastle.cms.CMSTypedStream$FullReaderStream.read(Unknown Source) <br>>         at java.security.DigestInputStream.read(DigestInputStream.java:144) <br>>         at java.io.BufferedInputStream.fill(BufferedInputStream.java:218) <br>>         at java.io.BufferedInputStream.read(BufferedInputStream.java:237) <br>>         at org.bouncycastle.cms.CMSTypedStream$FullReaderStream.read(Unknown Source) <br>>         at java.io.FilterInputStream.read(FilterInputStream.java:66) <br>>         at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source) <br>>         ... 5 more <br>> <br>> <br>> Can anyone help me and tell me how i extract the sighed data so that i can write out to a file? <br>> Thank you in advance. <br>> <br>> <br>> Andrea. <br>> <br>> <br>>       <br>> _________________________________________________________________ <br>> Giochi, radio, TV... E tutti i tuoi amici. Cercali su Messenger <br>> <a href="http://www.messenger.it/home_comunica.aspx" target="_top" rel="nofollow">http://www.messenger.it/home_comunica.aspx</a></div><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26630618 Creating PGPPublicKey from encoded key text 2009-12-03T10:17:27Z 2009-12-03T10:17:27Z Chuck Matthews <html><head></head><body><div style="font-family:tahoma,new york,times,serif;font-size:10pt;color:#000000;"><div><span class="yshortcuts" id="lw_1259864191_0">Good afternoon</span>,<br><br>Please forgive my ignorance, but I am working on my first encryption assignment.<br><br>I'll get right to it.......<br><br>What are the steps to create a PGPPublicKey directly from encoded key text? This is for an <span style="border-bottom: 1px dashed rgb(0, 102, 204); cursor: pointer;" class="yshortcuts" id="lw_1259864191_1">ERP system</span> and the key text will be persisted for each customer, without using a key ring. All I can seem to find are solutions utilizing a key ring. Can I do it without a key ring?<br><br>Thanks in advance for your help,<br><br>Chuck</div>  </div></body></html><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26626311 What's difference PGPSignature.DEFAULT_CERTIFICATION, POSITIVE, CASUAL and NO_CERTIFICATION? 2009-12-03T05:53:47Z 2009-12-03T05:53:47Z Mike Baikov Hello,<br><br>I'm can't find information about it :(<br><br>Thanks for answers.<br> <p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26625936 RE: Help reading and decrypting from a signed Data file 2009-12-03T05:26:10Z 2009-12-03T05:26:10Z Andrea Paternesi-4 <br>As asked, the exception occurs here when i try to read the signed content. <br><br>                 CMSSignedData signedData = new CMSSignedData(ins); <br><br>anyway i have tried different codes to read the signed content but it always return the same exception. <br><br><br>---------------------------------------- <div class='shrinkable-quote'><br>> From: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26625936&i=0" target="_top" rel="nofollow">patton73@...</a> <br>> To: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26625936&i=1" target="_top" rel="nofollow">dev-crypto@...</a> <br>> Subject: [dev-crypto] Help reading and decrypting from a signed Data file <br>> Date: Thu, 3 Dec 2009 12:16:40 +0100 <br>> <br>> <br>> Good mornig, <br>> <br>> i am new here. <br>> I am writing some code to try to decrypt a SignedData signed file. <br>> Anyway i cannot read the data from the signed file. <br>> I attach the code below. <br>> <br>> try { <br>>             File file = new File(path); <br>>             FileInputStream fis = new FileInputStream(file); <br>> <br>>             BufferedInputStream bis = new BufferedInputStream(fis, 640000); <br>>             CMSSignedDataParser sp = new CMSSignedDataParser(bis); <br>>             sp.getSignedContent().drain(); <br>> <br>>             certs = sp.getCertificatesAndCRLs("Collection", "BC"); <br>>             SignerInformationStore signers = sp.getSignerInfos(); <br>> <br>>             Collection c = signers.getSigners(); <br>>             it = c.iterator(); <br>> <br>>             while (it.hasNext()) { <br>>                 SignerInformation signer = (SignerInformation) it.next(); <br>>                 Collection certCollection = certs.getCertificates(signer.getSID()); <br>> <br>>                 Iterator certIt = certCollection.iterator(); <br>>                 X509Certificate cert = (X509Certificate) certIt.next(); <br>> <br>>                 System.out.println("Name: " + cert.getIssuerDN().getName()); <br>>                 System.out.println("Name: " + cert.getSubjectDN().toString()); <br>>                 System.out.println("verify returns: " + signer.verify(cert, "BC")); <br>> <br>>                 InputStream ins = sp.getSignedContent().getContentStream(); <br>> <br>>                 CMSSignedData signedData = new CMSSignedData(ins); <br>>                 Object content = signedData.getSignedContent().getContent(); <br>>                 byte[] b = (byte[]) content; <br>> <br>> <br>>                 int numread = 0; <br>>                 byte[] bytes = new byte[8192]; <br>>                 FileOutputStream fos = new FileOutputStream("/home/patton/p7m/new.txt"); <br>>                 while ((numread = ins.read(bytes))> 0) { <br>>                 fos.write(b, 0,numread); <br>>                 } <br>>                 fos.close(); <br>>                 ins.close(); <br>>             } <br>>         } catch (Exception e) { <br>>             e.printStackTrace(); <br>>         } <br>> <br>> The problem is that i get alway a Stream Closed exception. So i cannot read the signed Data. <br>> <br>> org.bouncycastle.cms.CMSException: IOException reading content. <br>>         at org.bouncycastle.cms.CMSUtils.readContentInfo(Unknown Source) <br>>         at org.bouncycastle.cms.CMSUtils.readContentInfo(Unknown Source) <br>>         at org.bouncycastle.cms.CMSSignedData.(Unknown Source) <br>>         at provasmartcard.ProvaLetturaP7M.leggip7m(ProvaLetturaP7M.java:109) <br>>         at provasmartcard.ProvaLetturaP7M.main(ProvaLetturaP7M.java:58) <br>> Caused by: java.io.IOException: Stream closed <br>>         at java.io.BufferedInputStream.getBufIfOpen(BufferedInputStream.java:145) <br>>         at java.io.BufferedInputStream.read(BufferedInputStream.java:308) <br>>         at org.bouncycastle.cms.CMSTypedStream$FullReaderStream.read(Unknown Source) <br>>         at java.security.DigestInputStream.read(DigestInputStream.java:144) <br>>         at java.io.BufferedInputStream.fill(BufferedInputStream.java:218) <br>>         at java.io.BufferedInputStream.read(BufferedInputStream.java:237) <br>>         at org.bouncycastle.cms.CMSTypedStream$FullReaderStream.read(Unknown Source) <br>>         at java.io.FilterInputStream.read(FilterInputStream.java:66) <br>>         at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source) <br>>         ... 5 more <br>> <br>> <br>> Can anyone help me and tell me how i extract the sighed data so that i can write out to a file? <br>> Thank you in advance. <br>> <br>> <br>> Andrea. <br>> <br>> <br>> <br>> _________________________________________________________________ <br>> Giochi, radio, TV... E tutti i tuoi amici. Cercali su Messenger <br>> <a href="http://www.messenger.it/home_comunica.aspx" target="_top" rel="nofollow">http://www.messenger.it/home_comunica.aspx</a></div>      <br>_________________________________________________________________ <br>I tuoi amici sempre a portata di clic, sul nuovo Web Messenger <br><a href="http://www.windowslive.it/foto.aspx" target="_top" rel="nofollow">http://www.windowslive.it/foto.aspx</a><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26624381 Help reading and decrypting from a signed Data file 2009-12-03T03:16:40Z 2009-12-03T03:16:40Z Andrea Paternesi-4 <br>Good mornig, <br><br>i am new here. <br>I am writing some code to try to decrypt a SignedData signed file. <br>Anyway i cannot read the data from the signed file. <br>I attach the code below. <br><br>try { <br> File file = new File(path); <br> FileInputStream fis = new FileInputStream(file); <br><br> BufferedInputStream bis = new BufferedInputStream(fis, 640000); <br> CMSSignedDataParser sp = new CMSSignedDataParser(bis); <br> sp.getSignedContent().drain(); <br><br> certs = sp.getCertificatesAndCRLs("Collection", "BC"); <br> SignerInformationStore signers = sp.getSignerInfos(); <br><br> Collection c = signers.getSigners(); <br> it = c.iterator(); <br><br> while (it.hasNext()) { <br> SignerInformation signer = (SignerInformation) it.next(); <br> Collection certCollection = certs.getCertificates(signer.getSID()); <br><br> Iterator certIt = certCollection.iterator(); <br> X509Certificate cert = (X509Certificate) certIt.next(); <br><br> System.out.println("Name: " + cert.getIssuerDN().getName()); <br> System.out.println("Name: " + cert.getSubjectDN().toString()); <br> System.out.println("verify returns: " + signer.verify(cert, "BC")); <br><br> InputStream ins = sp.getSignedContent().getContentStream(); <br><br> CMSSignedData signedData = new CMSSignedData(ins); <br> Object content = signedData.getSignedContent().getContent(); <br> byte[] b = (byte[]) content; <br><br><br> int numread = 0; <br> byte[] bytes = new byte[8192]; <br> FileOutputStream fos = new FileOutputStream("/home/patton/p7m/new.txt"); <br> while ((numread = ins.read(bytes))> 0) { <br> fos.write(b, 0,numread); <br> } <br> fos.close(); <br> ins.close(); <br> } <br> } catch (Exception e) { <br> e.printStackTrace(); <br> } <br><br>The problem is that i get alway a Stream Closed exception. So i cannot read the signed Data. <br><br>org.bouncycastle.cms.CMSException: IOException reading content. <br> at org.bouncycastle.cms.CMSUtils.readContentInfo(Unknown Source) <br> at org.bouncycastle.cms.CMSUtils.readContentInfo(Unknown Source) <br> at org.bouncycastle.cms.CMSSignedData.<init>(Unknown Source) <br> at provasmartcard.ProvaLetturaP7M.leggip7m(ProvaLetturaP7M.java:109) <br> at provasmartcard.ProvaLetturaP7M.main(ProvaLetturaP7M.java:58) <br>Caused by: java.io.IOException: Stream closed <br> at java.io.BufferedInputStream.getBufIfOpen(BufferedInputStream.java:145) <br> at java.io.BufferedInputStream.read(BufferedInputStream.java:308) <br> at org.bouncycastle.cms.CMSTypedStream$FullReaderStream.read(Unknown Source) <br> at java.security.DigestInputStream.read(DigestInputStream.java:144) <br> at java.io.BufferedInputStream.fill(BufferedInputStream.java:218) <br> at java.io.BufferedInputStream.read(BufferedInputStream.java:237) <br> at org.bouncycastle.cms.CMSTypedStream$FullReaderStream.read(Unknown Source) <br> at java.io.FilterInputStream.read(FilterInputStream.java:66) <br> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source) <br> ... 5 more <br><br><br>Can anyone help me and tell me how i extract the sighed data so that i can write out to a file? <br>Thank you in advance. <br><br><br>Andrea. <br><br><br>      <br>_________________________________________________________________ <br>Giochi, radio, TV... E tutti i tuoi amici. Cercali su Messenger <br><a href="http://www.messenger.it/home_comunica.aspx" target="_top" rel="nofollow">http://www.messenger.it/home_comunica.aspx</a><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26545844 Open SSL server with dynamically generated key pair and certificate chain 2009-11-28T04:28:21Z 2009-11-28T04:28:21Z Chris99 Hello, <br><br>I would like to create a java ssl server <br>        SSLServerSocket serversocket = (SSLServerSocket) SSLsocketFactory <br>                                        .createServerSocket(443); <br><br>using a keytore created dynamically at runtime from some java api (not using keytool). <br><br>I believe BouncyCastle is the right direction to search for such api, isn't it ? <br><br>I added bouncy castle in last position in my java.security <br>security.provider.1=sun.security.provider.Sun <br>security.provider.2=sun.security.rsa.SunRsaSign <br>security.provider.3=com.sun.net.ssl.internal.ssl.Provider <br>security.provider.4=com.sun.crypto.provider.SunJCE <br>security.provider.5=sun.security.jgss.SunProvider <br>security.provider.6=com.sun.security.sasl.Provider <br>security.provider.7=org.jcp.xml.dsig.internal.dom.XMLDSigRI <br>security.provider.8=sun.security.smartcardio.SunPCSC <br>security.provider.9=sun.security.mscapi.SunMSCAPI <br>security.provider.10=org.bouncycastle.jce.provider.BouncyCastleProvider <br><br>and here is my try <a href="http://old.nabble.com/file/p26545844/SSLServerDynamicCertificate.java" target="_top">SSLServerDynamicCertificate.java</a><br> generating this exception : <br><br>SUN <br>SunRsaSign <br>SunJSSE <br>SunJCE <br>SunJGSS <br>SunSASL <br>XMLDSig <br>SunPCSC <br>SunMSCAPI <br>BC <br>ok <br>javax.net.ssl.SSLException: No available certificate or key corresponds to the SSL cipher suites which are enabled. <br>        at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.checkEnabledSuites(SSLServerSocketImpl.java:307) <br>        at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.accept(SSLServerSocketImpl.java:253) <br>        at SSLServerDynamicCertificate.run(SSLServerDynamicCertificate.java:53) <br>        at SSLServerDynamicCertificate.main(SSLServerDynamicCertificate.java:23) <br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26525486 RE: encryption session key bad using PGP 6.5.8 2009-11-25T23:33:11Z 2009-11-25T23:33:11Z Kumarp Sorry, I don't know how to post to list. <br>Extremely sorry for this. <br>I don't know exactly whether it reached you or not. Because of this I am <br>getting the mails bouncing back. That's why it was happened, please forgive <br>my ignorance. <br><br>-----Original Message----- <br>From: Jon Eaves [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26525486&i=0" target="_top" rel="nofollow">jon@...</a>] <br>Sent: Thursday, November 26, 2009 12:59 PM <br>To: Kumarp <br>Cc: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26525486&i=1" target="_top" rel="nofollow">dev-crypto@...</a> <br>Subject: Re: [dev-crypto] encryption session key bad using PGP 6.5.8 <br><br>A word of warning.  Once is enough.  If you continue to post this - I'll <br>remove you and ban you. <br><br>You're not going to get assistance if you abuse the members on this list. <br><br>Cheers, <br>        -- jon <br><br>Kumarp wrote: <div class='shrinkable-quote'><br>> <br>> <br>> Need help on this. <br>> <br>> <br>> <br>> Thanks In Advance. <br>> <br>> <br>> <br>> <br>> <br>> I need some support from  BC Guys.!!!! <br>> <br>> I know BC guys are creators in Crypto. So actually I want  to do PGP <br>> encryption  with signing. <br>> <br>> I am already using the ''KeyBasedFilePprocessor.java" for PGP Encryption. <br>> But the problem's are: <br>> <br>> <br>> <br>> 1.I want to use the key store for encryption/decryption. <br>> <br>> 2.I want to sign the file after encryption. <br>> <br>> 3.Problem with PGP 6.5.8  software. <br>> <br>>                  a)Key pair is generated by the PGP 6.5.8 software. <br>> <br>> b)Encrypt using the public key with our BC API Code . <br>> <br>> c)Try to decrypt with the private key from PGP 6.5.8 software-which gives </div>a <div class='shrinkable-quote'><br>> -"encryption session key bad". <br>> <br>> <br>> <br>> Please help on this ASAP. <br>> <br>> Thanks In Advance. <br>> <br>> <br>> <br>> Kind Regards, <br>> <br>> Kumar  Phani M <br>> <br>> Tarang Software Technologies Pvt Ltd. <br>> <br>> <br>> <br>>                      Yesterday is not ours to recover, but tomorrow is </div>ours <br>> to win or to lose. <br>> <br>> <br>> <br>> <br><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26525430 Re: encryption session key bad using PGP 6.5.8 2009-11-25T23:29:15Z 2009-11-25T23:29:15Z Jon Eaves A word of warning.  Once is enough.  If you continue to post this - I'll remove you and ban you. <br><br>You're not going to get assistance if you abuse the members on this list. <br><br>Cheers, <br>        -- jon <br><br>Kumarp wrote: <div class='shrinkable-quote'><br>> <br>> <br>> Need help on this. <br>> <br>> <br>> <br>> Thanks In Advance. <br>> <br>> <br>> <br>> <br>> <br>> I need some support from  BC Guys.!!!! <br>> <br>> I know BC guys are creators in Crypto. So actually I want  to do PGP <br>> encryption  with signing. <br>> <br>> I am already using the ''KeyBasedFilePprocessor.java" for PGP Encryption. <br>> But the problem's are: <br>> <br>> <br>> <br>> 1.I want to use the key store for encryption/decryption. <br>> <br>> 2.I want to sign the file after encryption. <br>> <br>> 3.Problem with PGP 6.5.8  software. <br>> <br>>                  a)Key pair is generated by the PGP 6.5.8 software. <br>> <br>> b)Encrypt using the public key with our BC API Code . <br>> <br>> c)Try to decrypt with the private key from PGP 6.5.8 software-which gives a <br>> -"encryption session key bad". <br>> <br>> <br>> <br>> Please help on this ASAP. <br>> <br>> Thanks In Advance. <br>> <br>> <br>> <br>> Kind Regards, <br>> <br>> Kumar  Phani M <br>> <br>> Tarang Software Technologies Pvt Ltd. <br>> <br>> <br>> <br>>                      Yesterday is not ours to recover, but tomorrow is ours <br>> to win or to lose. <br>> <br>> <br>> <br>> </div><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26525236 encryption session key bad using PGP 6.5.8 2009-11-25T23:17:08Z 2009-11-25T23:17:08Z Kumarp <html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 12 (filtered medium)">  </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal><span style='color:#1F497D'>Need help on this.<o:p></o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'>Thanks In Advance.<o:p></o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p> <p class=MsoNormal>I need some support from  BC Guys.!!!!<o:p></o:p></p> <p class=MsoNormal>I know BC guys are creators in Crypto. So actually I want  to do PGP encryption  with signing.<o:p></o:p></p> <p class=MsoNormal>I am already using the ‘’KeyBasedFilePprocessor.java” for PGP Encryption. But the problem’s are:<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>1.I want to use the key store for encryption/decryption.<o:p></o:p></p> <p class=MsoNormal>2.I want to sign the file after encryption.<o:p></o:p></p> <p class=MsoNormal>3.Problem with PGP 6.5.8  software.<o:p></o:p></p> <p class=MsoNormal>                a)Key pair is generated by the PGP 6.5.8 software.<o:p></o:p></p> <p class=MsoNormal style='text-indent:.5in'>b)Encrypt using the public key with our BC API Code .<o:p></o:p></p> <p class=MsoNormal style='text-indent:.5in'>c)Try to decrypt with the private key from PGP 6.5.8 software-which gives a –<span style='background:lime; mso-highlight:lime'>“encryption session key bad”</span>.<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>Please help on this ASAP.<o:p></o:p></p> <p class=MsoNormal style='margin-left:1.5in;text-indent:.5in'>Thanks In Advance.<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>Kind Regards,<o:p></o:p></p> <p class=MsoNormal><b><span style='color:#339966'>Kumar  Phani M<o:p></o:p></span></b></p> <p class=MsoNormal>Tarang Software Technologies Pvt Ltd.<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal><b><span style='font-family:"Times New Roman","serif"; color:#365F91'>                    Yesterday is not ours to recover, but tomorrow is ours to win or to lose.<o:p></o:p></span></b></p> <p class=MsoNormal><o:p> </o:p></p> </div> </body> </html> <p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26525092 I need help and also want ot be a member of Legion. 2009-11-25T22:59:00Z 2009-11-25T22:59:00Z Kumarp <html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 12 (filtered medium)">  </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal><span style='color:#1F497D'>Need help on this.<o:p></o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'>Thanks In Advance.<o:p></o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p> <p class=MsoNormal>I need some support from  BC Guys.!!!!<o:p></o:p></p> <p class=MsoNormal>I know BC guys are creators in Crypto. So actually I want  to do PGP encryption  with signing.<o:p></o:p></p> <p class=MsoNormal>I am already using the ‘’KeyBasedFilePprocessor.java” for PGP Encryption. But the problem’s are:<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>1.I want to use the key store for encryption/decryption.<o:p></o:p></p> <p class=MsoNormal>2.I want to sign the file after encryption.<o:p></o:p></p> <p class=MsoNormal>3.Problem with PGP 6.5.8  software.<o:p></o:p></p> <p class=MsoNormal>                a)Key pair is generated by the PGP 6.5.8 software.<o:p></o:p></p> <p class=MsoNormal style='text-indent:.5in'>b)Encrypt using the public key with our BC API Code .<o:p></o:p></p> <p class=MsoNormal style='text-indent:.5in'>c)Try to decrypt with the private key from PGP 6.5.8 software-which gives a –<span style='background:lime; mso-highlight:lime'>“encryption session key bad”</span>.<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>Please help on this ASAP.<o:p></o:p></p> <p class=MsoNormal style='margin-left:1.5in;text-indent:.5in'>Thanks In Advance.<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>Kind Regards,<o:p></o:p></p> <p class=MsoNormal><b><span style='color:#339966'>Kumar  Phani M<o:p></o:p></span></b></p> <p class=MsoNormal>Tarang Software Technologies Pvt Ltd.<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal><b><span style='font-family:"Times New Roman","serif"; color:#365F91'>                    Yesterday is not ours to recover, but tomorrow is ours to win or to lose.<o:p></o:p></span></b></p> <p class=MsoNormal><o:p> </o:p></p> </div> </body> </html> <p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26525038 FW: I need help and also want ot be a member of Legion. 2009-11-25T22:52:31Z 2009-11-25T22:52:31Z Kumarp <html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 12 (filtered medium)">  </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> <p class=MsoNormal><span style='color:#1F497D'>Need help on this.<o:p></o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'>Thanks In Advance.<o:p></o:p></span></p> <p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p> <div> <div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'> <p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Kumarp [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26525038&i=0" target="_top" rel="nofollow">Kumarp@...</a>] <br> <b>Sent:</b> Thursday, November 26, 2009 11:34 AM<br> <b>To:</b> '<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26525038&i=1" target="_top" rel="nofollow">feedback-crypto@...</a>'<br> <b>Subject:</b> I need help and also want ot be a member of Legion.<o:p></o:p></span></p> </div> </div> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>Hi ,<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>I need some support from  BC Guys.!!!!<o:p></o:p></p> <p class=MsoNormal>I know BC guys are creators in Crypto. So actually I want  to do PGP encryption  with signing.<o:p></o:p></p> <p class=MsoNormal>I am already using the ‘’KeyBasedFilePprocessor.java” for PGP Encryption. But the problem’s are:<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>1.I want to use the key store for encryption/decryption.<o:p></o:p></p> <p class=MsoNormal>2.I want to sign the file after encryption.<o:p></o:p></p> <p class=MsoNormal>3.Problem with PGP 6.5.8  software.<o:p></o:p></p> <p class=MsoNormal>                a)Key pair is generated by the PGP 6.5.8 software.<o:p></o:p></p> <p class=MsoNormal style='text-indent:.5in'>b)Encrypt using the public key with our BC API Code .<o:p></o:p></p> <p class=MsoNormal style='text-indent:.5in'>c)Try to decrypt with the private key from PGP 6.5.8 software-which gives a –<span style='background:lime; mso-highlight:lime'>“encryption session key bad”</span>.<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>Please help on this ASAP.<o:p></o:p></p> <p class=MsoNormal style='margin-left:1.5in;text-indent:.5in'>Thanks In Advance.<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal>Kind Regards,<o:p></o:p></p> <p class=MsoNormal><b><span style='color:#339966'>Kumar  Phani M<o:p></o:p></span></b></p> <p class=MsoNormal>Skype @ kumarphani<o:p></o:p></p> <p class=MsoNormal>Tarang Software Technologies Pvt Ltd.<o:p></o:p></p> <p class=MsoNormal><o:p> </o:p></p> <p class=MsoNormal><b><span style='font-family:"Times New Roman","serif"; color:#365F91'>                    Yesterday is not ours to recover, but tomorrow is ours to win or to lose.<o:p></o:p></span></b></p> <p class=MsoNormal><o:p> </o:p></p> </div> </body> </html> <p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26476661 Re: Re: How to exclude IEEE 1363 related algorithms? 2009-11-23T03:48:36Z 2009-11-23T03:48:36Z Maarten Bodewes By definition it is a good idea to know what you are doing. <br><br>As said, IEEE 1363 is a standard that describes many cryptographic <br>algorithms. If you would remove all those implementations then a lot <br>of bouncy's functionality will be gone, up and including anything to <br>do with PKI (including SSL, for instance). It may also be hard to do <br>since there will be a lot of dependencies on the code. It will also <br>break the signature that are part of the jars of the bouncy provider. <br><br>Basically you don't want to do this. Now start reading IEEE 1363 and <br>try and find out where the company is trying to go. <br><br>Regards, <br>Maarten <br><br>On Mon, Nov 23, 2009 at 3:01 AM,  <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26476661&i=0" target="_top" rel="nofollow">bruce.li@...</a>> wrote: <div class='shrinkable-quote'><br>> Thanks guys. I'm new to the project so I need to learn what IEEE 1363 is <br>> then see what code should be removed. So there is no compile option <br>> available to do that, right? I will need to remove some source code from the <br>> package then compile my version of Bounce Castle, is this correct? <br>> <br>> <br>> Thanks! <br>> <br>> On Nov 23, 2009 6:19am, David Hook <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26476661&i=1" target="_top" rel="nofollow">dgh@...</a>> wrote: <br>>> <br>>> <br>>> Yes, you'd have to remove the source. As Maarten points out though, I'd <br>>> <br>>> find out exactly what your lawyers concerns are first - while I'm sure <br>>> <br>>> they understand the legals, it doesn't sound like they really know what <br>>> <br>>> IEEE 1363 is. <br>>> <br>>> <br>>> <br>>> Regards, <br>>> <br>>> <br>>> <br>>> David <br>>> <br>>> <br>>> <br>>> On Fri, 2009-11-20 at 17:15 +0800, Bruce Li wrote: <br>>> <br>>> > Hi guys, <br>>> <br>>> > <br>>> <br>>> > We want to use Bouncy Castle APIs in our application but our legal <br>>> <br>>> > asks to remove the IEEE 1363 implementation. The version we will use <br>>> <br>>> > is 1.40. Is there a way to exclude IEEE 1363 related code with a <br>>> <br>>> > compile option? Or we must remove the source code? <br>>> <br>>> > <br>>> <br>>> > <br>>> <br>>> > Thanks, <br>>> <br>>> > - Bruce Li <br>>> <br>>> > <br>>> <br>>> <br>>> </div><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26471746 Re: Re: How to exclude IEEE 1363 related algorithms? 2009-11-22T18:01:01Z 2009-11-22T18:01:01Z Bruce Li-3 Thanks guys. I'm new to the project so I need to learn what IEEE 1363 is then see what code should be removed. So there is no compile option available to do that, right? I will need to remove some source code from the package then compile my version of Bounce Castle, is this correct?<br /><br /><br />Thanks!<br /><br />On Nov 23, 2009 6:19am, David Hook <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26471746&i=0" target="_top" rel="nofollow">dgh@...</a>> wrote:<div class='shrinkable-quote'><br />> <br />> <br />> Yes, you'd have to remove the source. As Maarten points out though, I'd<br />> <br />> find out exactly what your lawyers concerns are first - while I'm sure<br />> <br />> they understand the legals, it doesn't sound like they really know what<br />> <br />> IEEE 1363 is.<br />> <br />> <br />> <br />> Regards,<br />> <br />> <br />> <br />> David<br />> <br />> <br />> <br />> On Fri, 2009-11-20 at 17:15 +0800, Bruce Li wrote:<br />> <br />> > Hi guys,<br />> <br />> ><br />> <br />> > We want to use Bouncy Castle APIs in our application but our legal<br />> <br />> > asks to remove the IEEE 1363 implementation. The version we will use<br />> <br />> > is 1.40. Is there a way to exclude IEEE 1363 related code with a<br />> <br />> > compile option? Or we must remove the source code?<br />> <br />> ><br />> <br />> ><br />> <br />> > Thanks,<br />> <br />> > - Bruce Li<br />> <br />> ><br />> <br />> <br />></div><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26470202 Re: How to exclude IEEE 1363 related algorithms? 2009-11-22T14:19:14Z 2009-11-22T14:19:14Z David Hook-2 <br>Yes, you'd have to remove the source. As Maarten points out though, I'd <br>find out exactly what your lawyers concerns are first - while I'm sure <br>they understand the legals, it doesn't sound like they really know what <br>IEEE 1363 is. <br><br>Regards, <br><br>David <br><br>On Fri, 2009-11-20 at 17:15 +0800, Bruce Li wrote: <div class='shrinkable-quote'><br>> Hi guys, <br>> <br>> We want to use Bouncy Castle APIs in our application but our legal <br>> asks to remove the IEEE 1363 implementation. The version we will use <br>> is 1.40. Is there a way to exclude IEEE 1363 related code with a <br>> compile option? Or we must remove the source code? <br>> <br>> <br>> Thanks, <br>> - Bruce Li <br>> </div><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26456201 Re: How to exclude IEEE 1363 related algorithms? 2009-11-21T04:34:48Z 2009-11-21T04:34:48Z Maarten Bodewes On Fri, Nov 20, 2009 at 10:15 AM, Bruce Li <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26456201&i=0" target="_top" rel="nofollow">bruce.li@...</a>> wrote: <br>> We want to use Bouncy Castle APIs in our application but our legal <br>> asks to remove the IEEE 1363 implementation. The version we will use <br>> is 1.40. Is there a way to exclude IEEE 1363 related code with a <br>> compile option? Or we must remove the source code? <br>> <br><br>Is it me, or isn't IEEE 1363 an aggregation of different cryptographic <br>techniques? <br><br><a href="http://en.wikipedia.org/wiki/IEEE_P1363" target="_top" rel="nofollow">http://en.wikipedia.org/wiki/IEEE_P1363</a><br><br>You'd better not want to have anything to do with any kind of standard <br>signature formats and/or key agreement techniques. <br><br>Or maybe your "legal" did not look at this page? <br><br><a href="http://grouper.ieee.org/groups/1363/P1363/patents.html" target="_top" rel="nofollow">http://grouper.ieee.org/groups/1363/P1363/patents.html</a><br><br>What algorithm is your legal uncomfortable with? Or is there a set of <br>algorithms that is commonly denoted by IEEE 1363 that I'm not aware of <br>(like ISO denotes the scales defined in ISO 5800:1987 in the <br>photography world?) <br><br>Regards, <br>Maarten <br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26446499 Occasional decryption failure: java.io.EOFException: premature end of stream in PartialInputStream 2009-11-20T12:04:33Z 2009-11-22T10:46:10Z ericlaw1 I am encrypting a csv text file using gpg (GnuPG) 1.4.9. with this command: <br><br>gpg --always-trust --batch --yes -quiet  --no-verbose --no-secmem-warning -z 0 -r ${KEYID} -ea $f <br><br>When the recipient of the file decrypts using the BC java api 1.38 it will successfully decrypt about 1/2 the time. Otherwise, it fails like this: <br><br>xxxxxmgr_20091110_142314.csv.pgp: Failed to import. Error occurred while decrypting the file. <br>java.io.EOFException: premature end of stream in PartialInputStream <br>at org.bouncycastle.bcpg.BCPGInputStream$PartialInputStream.read(Unknown Source) <br>at org.bouncycastle.bcpg.BCPGInputStream.read(Unknown Source) <br>at java.io.InputStream.read(InputStream.java:85) <br>at javax.crypto.CipherInputStream.a(DashoA13*..) <br>at javax.crypto.CipherInputStream.read(DashoA13*..) <br>at org.bouncycastle.bcpg.BCPGInputStream.read(Unknown Source) <br>at org.bouncycastle.openpgp.PGPEncryptedData$TruncatedStream.read(Unknown Source) <br>at java.io.InputStream.read(InputStream.java:154) <br>at java.security.DigestInputStream.read(DigestInputStream.java:144) <br>at org.bouncycastle.bcpg.BCPGInputStream.read(Unknown Source) <br>at org.bouncycastle.bcpg.BCPGInputStream$PartialInputStream.read(Unknown Source) <br>at org.bouncycastle.bcpg.BCPGInputStream.read(Unknown Source) <br>at java.io.InputStream.read(InputStream.java:85) <br>at com.icims.util.pgp.PGPDecryptor.decrypt(PGPDecryptor.java:172) <br>at com.icims.services.scheduler.DataImportScheduler.decryptingFile(DataImportScheduler.java:555) <br>at com.icims.services.scheduler.DataImportScheduler.importingData(DataImportScheduler.java:215) <br>at com.icims.services.scheduler.task.DataImportSchedulerTask.run(DataImportSchedulerTask.java:77) <br>at com.icims.services.thread.ThreadsManager$ThreadWrapper.run(ThreadsManager.java:147) <br>at java.lang.Thread.run(Thread.java:619) <br><br>Any ideas on what might be causing this error? <br><br>Thanks, <br><br>Eric <br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26441558 SMIME Encrypt the message with attachment not working 2009-11-20T04:38:33Z 2009-11-20T04:38:33Z bommera I am trying to encrypt a mime message. If the message is plain it works fine. But if it is multipart (with an attachment) the encrypted message, when decrypted shows no contents. This is working fine in BC 1.34, I tried to upgrade to BC 1.44 in which this problem is coming. I tried this from 1.38 onwards and in all its not giving content in the encrypted mail correctly. <br>We can easily verify this as the attachment size is say 100 KB, the encrypted message shown is very small. <br><br>Please look into the source code below. Can anyone please help me. <br><br>import java.io.FileInputStream; <br>import java.io.FileOutputStream; <br>import java.security.KeyStore; <br>import java.security.Security; <br>import java.security.cert.Certificate; <br>import java.security.cert.CertificateFactory; <br>import java.security.cert.X509Certificate; <br>import java.util.Enumeration; <br>import java.util.Properties; <br><br>import javax.mail.Address; <br>import javax.mail.Header; <br>import javax.mail.Message; <br>import javax.mail.MessagingException; <br>import javax.mail.Session; <br>import javax.mail.internet.InternetAddress; <br>import javax.mail.internet.MimeBodyPart; <br>import javax.mail.internet.MimeMessage; <br><br>import org.bouncycastle.jce.provider.BouncyCastleProvider; <br>import org.bouncycastle.mail.smime.SMIMEEnvelopedGenerator; <br><br><br>public class CreateEncryptedMail { <br>        public static void main(String args[]) throws Exception { <br>                // <br>                // Open the key store <br>                // <br>                <br>                Security.addProvider(new BouncyCastleProvider()); <br>                <br>                FileInputStream fis = new FileInputStream("/home/srinivas/test.cer"); <br>                CertificateFactory cf = CertificateFactory.getInstance("X.509"); <br>                X509Certificate cert = (X509Certificate)cf.generateCertificate(fis); <br><br>                // <br>                // create the generator for creating an smime/encrypted message <br>                // <br>                SMIMEEnvelopedGenerator gen = new SMIMEEnvelopedGenerator(); <br><br>                gen.addKeyTransRecipient(cert); <br><br>                <br><br>                // <br>                // Get a Session object and create the mail message <br>                // <br>                Properties props = System.getProperties(); <br>                Session session = Session.getDefaultInstance(props, null); <br>                // <br>                // create the base for our message <br>                // <br>                MimeMessage msg = new MimeMessage(session, new FileInputStream("/home/srinivas/Desktop/TestMessage.eml")); <br>                <br>                MimeBodyPart mp = gen.generate(msg, <br>                                SMIMEEnvelopedGenerator.DES_EDE3_CBC, "BC"); <br>                <br>                MimeMessage encryptedMessage  = copyNoMimeHeaders(msg,session); <br>                encryptedMessage.setContent(mp.getContent(), mp.getContentType()); <br>                encryptedMessage.saveChanges(); <br><br>                encryptedMessage.writeTo(new FileOutputStream("/home/srinivas/Desktop/Testencrypted.eml")); <br>        } <br>        <br>        protected static MimeMessage copyNoMimeHeaders(MimeMessage _orig, Session _sess) <br>    throws MessagingException <br>        { <br>          MimeMessage _result = new MimeMessage(_sess); <br>          Enumeration _enum   = _orig.getAllHeaders(); <br>          Header      _h; <br>          while(_enum.hasMoreElements()) <br>          { <br>                  _h = (Header)_enum.nextElement(); <br>                  if(!(isMimeHeader(_h))) <br>                  { <br>                          _result.addHeader(_h.getName(), _h.getValue()); <br>                  } <br>          } <br>          return _result;   <br>        }   <br>        protected static boolean isMimeHeader(Header _h) <br>          { <br>                String _name = _h.getName().toLowerCase(); <br>                return (_name.startsWith("content-") || _name.startsWith("mime-version") || _name.startsWith("date")); <br>                //return (_name.startsWith("to") || _name.startsWith("from") || _name.startsWith("subject") || _name.startsWith("cc") || _name.startsWith("bcc")); <br>          } <br>} <br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26440357 How to exclude IEEE 1363 related algorithms? 2009-11-20T01:15:39Z 2009-11-20T01:15:39Z Bruce Li-3 Hi guys, <br><br>We want to use Bouncy Castle APIs in our application but our legal <br>asks to remove the IEEE 1363 implementation. The version we will use <br>is 1.40. Is there a way to exclude IEEE 1363 related code with a <br>compile option? Or we must remove the source code? <br><br><br>Thanks, <br>- Bruce Li <br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26437154 Re: PGP Encrypting a stream without writing to a temporary file 2009-11-19T17:31:08Z 2009-11-19T17:31:08Z David Hook-2 <br>If you are getting this exception on opening the stream it indicates <br>that the stream is corrupted in some way (as in it hasn't got as far as <br>decrypting). If it's doing this when you try and read back the literal <br>data it is likely to be the encryption key. <br><br>Try and get it to work without doing the encryption step first, so your <br>just dealing with the literal data first up. <br><br>Regards, <br><br>David <br><br>On Mon, 2009-11-16 at 11:31 +0000, Matt Fellows wrote: <div class='shrinkable-quote'><br>> I’m attempting to encrypt an InputStream (It’s a ByteArrayInputStream <br>> but I’m hoping to make this a generic method so it hopefully won’t <br>> matter) with PGP.  I’ve taken the PGP examples which all use encrypt a <br>> file and attempted to modify them to read from a String in plaintext <br>> rather than a file.  It all seems to work fine except that when I try <br>> to decrypt the stream again, which has been written to a file in the <br>> mean-time I get the following exception: java.io.IOException: unknown <br>> object in stream: 57 <br>> <br>>   <br>> <br>> I’m convinced this means that the encryption has failed as when I use <br>> the method in the example the decryption works fine. <br>> <br>>   <br>> <br>> I’ve basically taken the example code and replaced: <br>> <br>>   <br>> <br>> PGPUtil.writeFileToLiteralData(comData.open(cOut), <br>> PGPLiteralData.BINARY, new File(fileName), new byte[1 << 16]); <br>> <br>>   <br>> <br>> With: <br>> <br>>   <br>> <br>> byte[] buffer = new byte[1 <<16]; <br>> <br>> PGPLiteralDataGenerator lData = new PGPLiteralDataGenerator(); <br>> <br>> OutputStream            pOut = lData.open(out, PGPLiteralData.BINARY, <br>> PGPLiteralData.CONSOLE, PGPLiteralData.NOW, buffer); <br>> <br>> byte[]                  buf = new byte[buffer.length]; <br>> <br>> int                     len; <br>> <br>>             <br>> <br>> while ((len = in.read(buf)) > 0) <br>> <br>> { <br>> <br>>       pOut.write(buf, 0, len); <br>> <br>> } <br>> <br>>             <br>> <br>> lData.close(); <br>> <br>> in.close(); <br>> <br>> pOut.close(); <br>> <br>>   <br>> <br>> Where in is my input stream.  SO the whole method now looks like: <br>> <br>>   <br>> <br>> private static void encryptStream( <br>> <br>>                     OutputStream    out, <br>> <br>>                     InputStream     in, <br>> <br>>                     PGPPublicKey    encKey, <br>> <br>>                     boolean         armor, <br>> <br>>                     boolean         withIntegrityCheck) <br>> <br>>                     throws IOException, NoSuchProviderException <br>> <br>>     {     <br>> <br>>         if (armor) <br>> <br>>         { <br>> <br>>             out = new ArmoredOutputStream(out); <br>> <br>>         } <br>> <br>>         <br>> <br>>         try <br>> <br>>         {     <br>> <br>>             PGPEncryptedDataGenerator   cPk = new <br>> PGPEncryptedDataGenerator(PGPEncryptedData.CAST5, withIntegrityCheck, <br>> new SecureRandom(), "BC"); <br>> <br>>                 <br>> <br>>             cPk.addMethod(encKey); <br>> <br>>             <br>> <br>>             OutputStream                cOut = cPk.open(out, new <br>> byte[1 << 16]); <br>> <br>>             <br>> <br>>             PGPCompressedDataGenerator  comData = new <br>> PGPCompressedDataGenerator( <br>> <br>> <br>> PGPCompressedData.ZIP); <br>> <br>>             <br>> <br>>             byte[] buffer = new byte[1 <<16]; <br>> <br>>             PGPLiteralDataGenerator lData = new <br>> PGPLiteralDataGenerator(); <br>> <br>>             OutputStream            pOut = lData.open(out, <br>> PGPLiteralData.BINARY, PGPLiteralData.CONSOLE, PGPLiteralData.NOW, <br>> buffer); <br>> <br>>             byte[]                  buf = new byte[buffer.length]; <br>> <br>>             int                     len; <br>> <br>>             <br>> <br>>             while ((len = in.read(buf)) > 0) <br>> <br>>             { <br>> <br>>                 pOut.write(buf, 0, len); <br>> <br>>             } <br>> <br>>             <br>> <br>>             lData.close(); <br>> <br>>             in.close(); <br>> <br>>             pOut.close(); <br>> <br>>   <br>> <br>>             //PGPUtil.writeFileToLiteralData(comData.open(cOut), <br>> PGPLiteralData.BINARY, new File(fileName), new byte[1 << 16]); <br>> <br>>             <br>> <br>>             comData.close(); <br>> <br>>             <br>> <br>>             cOut.close(); <br>> <br>>   <br>> <br>>             out.close(); <br>> <br>>         } <br>> <br>>         catch (PGPException e) <br>> <br>>         { <br>> <br>>             System.err.println(e); <br>> <br>>             if (e.getUnderlyingException() != null) <br>> <br>>             { <br>> <br>>                 e.getUnderlyingException().printStackTrace(); <br>> <br>>             } <br>> <br>>         } <br>> <br>>     } <br>> <br>>   <br>> <br>> Does anyone see anything that is obviously wrong with this?  I’m <br>> mostly thinking that the lData.open() method is the most likely place <br>> for an error, as that’s what I understand the least. <br>> <br>>   <br>> <br>> Kind regards, <br>> <br>> Matt <br>> <br>>   <br>> <br>> <br>> ___________________________________________________________ <br>> <br>> First Option's outgoing email policy is at <br>> <a href="http://www.firstoption.net/emailpolicy.html" target="_top" rel="nofollow">http://www.firstoption.net/emailpolicy.html</a>, but a short summary is :- <br>> <br>> - all email/attachments are confidential; do not use, circulate or <br>> release <br>> without our consent <br>> <br>> - email is not authorised unless it is on First Option business <br>> <br>> - email is not binding unless it is from an authorised person <br>> and is signed with a digital certificate <br>> <br>> First Option Ltd. - Switchboard +44 (0) 1962 738200 <br>> Signal House, Jacklyns Lane, Alresford, Hants, SO24 9JJ, United <br>> Kingdom. Registered Company No: 2453594 <br>> ___________________________________________________________ <br>> </div><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26437081 Re: RFC 2256 and DMD Name 2.5.4.54 oid 2009-11-19T17:19:42Z 2009-11-19T17:19:42Z David Hook-2 <br>This is now checked into CVS and will appear in the next beta. <br><br>Regards, <br><br>David <br><br>On Thu, 2009-11-19 at 21:31 +0100, Bruno Dorel wrote: <div class='shrinkable-quote'><br>> > High all <br>> > <br>> > I'm using the JCE BouncyCastle to read CRLs and Certificates fom an LDAP <br>> > repository <br>> > <br>> > The certificates and CRL Issuer and subject name use an RFC 2256's  oid   <br>> > : 2.5.4.54  DMDName   for Domain Name <br>> > <br>> > Is it possible to add this oid in the X509Name class to have a smart <br>> > usage of  this OID. <br>> > <br>> > My application thanks you in advance . <br>> > <br>> > Bests regards <br>> > <br>> > <br>> > B DOREL <br>> > <br>> > <br>> <br>> <br>> </div><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26433596 RFC 2256 and DMD Name 2.5.4.54 oid 2009-11-19T12:31:09Z 2009-11-19T12:31:09Z Dorel bruno   <div class='shrinkable-quote'><br>> High all <br>> <br>> I'm using the JCE BouncyCastle to read CRLs and Certificates fom an LDAP <br>> repository <br>> <br>> The certificates and CRL Issuer and subject name use an RFC 2256's  oid   <br>> : 2.5.4.54  DMDName   for Domain Name <br>> <br>> Is it possible to add this oid in the X509Name class to have a smart <br>> usage of  this OID. <br>> <br>> My application thanks you in advance . <br>> <br>> Bests regards <br>> <br>> <br>> B DOREL <br>> <br>> </div><br><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26386978 Re: APPLET AND KEY GENERATION 2009-11-17T01:42:12Z 2009-11-17T01:42:12Z aris-7 Viet H. Phan wrote: <div class='shrinkable-quote'><br>> Aris, <br>> <br>> The following BC API-based code sample shows you how to convert <br>> OpenPGP's native raw binary octets to Radix-64: <br>> <br>> private byte[] armor(byte[] nativeData) throws Exception { <br>>     ByteArrayOutputStream out = new ByteArrayOutputStream(); <br>>     ArmoredOutputStream aOut = new ArmoredOutputStream(out); <br>>     aOut.write(nativeData); <br>>     aOut.close(); <br>>     byte[] ret = out.toByteArray(); <br>>     out.close(); <br>>     return ret; <br>> } <br>> <br>> Hope it helps you out. <br>> <br>> Regards, <br>> Viet <br>>   <br>> <br>> --- On *Mon, 11/16/09, aris /<<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26386978&i=0" target="_top" rel="nofollow">aris@...</a>>/* wrote: <br>> <br>> <br>>     From: aris <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26386978&i=1" target="_top" rel="nofollow">aris@...</a>> <br>>     Subject: Re: [dev-crypto] APPLET AND KEY GENERATION <br>>     To: "Maarten Bodewes" <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26386978&i=2" target="_top" rel="nofollow">maarten.bodewes@...</a>> <br>>     Cc: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26386978&i=3" target="_top" rel="nofollow">dev-crypto@...</a> <br>>     Date: Monday, November 16, 2009, 10:58 PM <br>> <br>>     Maarten Bodewes wrote: <br>>     > On Fri, Nov 13, 2009 at 12:48 PM, aris <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26386978&i=4" target="_top" rel="nofollow">aris@...</a> <br>>     </<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26386978&i=5" target="_top" rel="nofollow">mc/compose?to=aris@...</a>>> wrote: <br>>     >   <br>>     >> I know i'm overusing your kindness but i'm searching from <br>>     yesterday a way to <br>>     >> get the plain readable ascii text of the publicKey from the <br>>     example you gave <br>>     >> me with no luck. <br>>     >> All i can get from the PGPPublicKey is the getEncoded byte <br>>     array (which when <br>>     >> i convert to a string gives me encoded text) or the <br>>     encode(outputstream) <br>>     >> function which also <br>>     >> writes to a file and i don't want that. <br>>     >> <br>>     >>     <br>>     > That ASCII text you are looking for is called PGP armour. It's <br>>     > basically base 64 encoded binary, where the binary is very <br>>     likely the <br>>     > bytes you got from the encode() method. Could you have a look and <br>>     > report back if you can find encoders for PGP armoured files or base <br>>     > 64? <br>>     > <br>>     > Don't forget that programming is only a small part of development. <br>>     > Using google and doing research takes more time. These things can <br>>     > certainly be found after some good searches. Try and make sure <br>>     you've <br>>     > tried everything before asking questions, and report what you've <br>>     tried <br>>     > to do without our help. <br>>     > <br>>     > Kind regards, <br>>     > Maarten <br>>     > <br>>     > <br>>     >   <br>>     This is with base64 encoding of the byte array and the key is invalid. <br>>     gpg: invalid radix64 character 2D skipped <br>>     gpg: [don't know]: invalid packet (ctb=10) <br>>     gpg: read_block: read error: Invalid packet <br>>     gpg: no valid OpenPGP data found. <br>>     gpg: import from `ar.asc' failed: Invalid keyring <br>>     gpg: Total number processed: 0 <br>> <br>> <br>>     I've search and it's not exactly base64 but radix64 encoding that <br>>     i need <br>>     to convert the byte array that i get from the bouncycastle api. <br>>     There are no radix64 available encoders out there, that means i must <br>>     make my own? It's not that hard but i'm confused as i would expect <br>>     the <br>>     whole API to have something that can give you <br>>     the ascii public key without writing your own wrappers. surely i'm <br>>     not <br>>     the only one who uses the API and has needed such functionality? <br>> <br>>     any help appreciated. <br>>     aris <br>> <br>> <br>> </div>Ok thanks a lot this worked. It was simple yes, i got confused with the <br>base64 encodings, but it was readily available. <br>Sorry asking trivial questions. <br><br>aris <br><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26375681 Re: APPLET AND KEY GENERATION 2009-11-16T09:08:25Z 2009-11-16T09:08:25Z Viet H. Phan <table cellspacing="0" cellpadding="0" border="0"><tr><td valign="top" style="font: inherit;">Aris,<br><br>The following BC API-based code sample shows you how to convert OpenPGP's native raw binary octets to Radix-64:<br><br>private byte[] armor(byte[] nativeData) throws Exception {<br>    ByteArrayOutputStream out = new ByteArrayOutputStream();<br>    ArmoredOutputStream aOut = new ArmoredOutputStream(out);<br>    aOut.write(nativeData);<br>    aOut.close();<br>    byte[] ret = out.toByteArray();<br>    out.close();<br>    return ret;<br>}<br><br>Hope it helps you out.<br><br>Regards,<br>Viet<br> <br><span style="font-family: monospace;"><br></span>--- On <b>Mon, 11/16/09, aris <i><<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26375681&i=0" target="_top" rel="nofollow">aris@...</a>></i></b> wrote:<br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><br>From: aris <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26375681&i=1" target="_top" rel="nofollow">aris@...</a>><br>Subject: Re: [dev-crypto] APPLET AND KEY GENERATION<br>To: "Maarten Bodewes" <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26375681&i=2" target="_top" rel="nofollow">maarten.bodewes@...</a>><br>Cc: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26375681&i=3" target="_top" rel="nofollow">dev-crypto@...</a><br>Date: Monday, November 16, 2009, 10:58 PM<br><br><div class="plainMail">Maarten Bodewes wrote:<div class='shrinkable-quote'><br>> On Fri, Nov 13, 2009 at 12:48 PM, aris <<a ymailto="mailto:aris@delivopoulou.gr" href="/mc/compose?to=aris@delivopoulou.gr" target="_top" rel="nofollow">aris@...</a>> wrote:<br>>   <br>>> I know i'm overusing your kindness but i'm searching from yesterday a way to<br>>> get the plain readable ascii text of the publicKey from the example you gave<br>>> me with no luck.<br>>> All i can get from the PGPPublicKey is the getEncoded byte array (which when<br>>> i convert to a string gives me encoded text) or the encode(outputstream)<br>>> function which also<br>>> writes to a file and i don't want that.<br>>><br>>>     <br>> That ASCII text you are looking for is called PGP armour. It's<br>> basically base 64 encoded binary, where the binary is very likely the<br>> bytes you got from the encode() method. Could you have a look and<br>> report back if you can find encoders for PGP armoured files or base<br>> 64?<br>><br>> Don't forget that programming is only a small part of development.<br>> Using google and doing research takes more time. These things can<br>> certainly be found after some good searches. Try and make sure you've<br>> tried everything before asking questions, and report what you've tried<br>> to do without our help.<br>><br>> Kind regards,<br>> Maarten<br>><br>><br>>   </div>This is with base64 encoding of the byte array and the key is invalid.<br>gpg: invalid radix64 character 2D skipped<br>gpg: [don't know]: invalid packet (ctb=10)<br>gpg: read_block: read error: Invalid packet<br>gpg: no valid OpenPGP data found.<br>gpg: import from `ar.asc' failed: Invalid keyring<br>gpg: Total number processed: 0<br><br><br>I've search and it's not exactly base64 but radix64 encoding that i need <br>to convert the byte array that i get from the bouncycastle api.<br>There are no radix64 available encoders out there, that means i must <br>make my own? It's not that hard but i'm confused as i would expect the <br>whole API to have something that can give you<br>the ascii public key without writing your own wrappers. surely i'm not <br>the only one who uses the API and has needed such functionality?<br><br>any help appreciated.<br>aris<br><br><br></div></blockquote></td></tr></table><br> <p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26374401 Re: APPLET AND KEY GENERATION 2009-11-16T07:58:55Z 2009-11-16T07:58:55Z aris-7 Maarten Bodewes wrote: <div class='shrinkable-quote'><br>> On Fri, Nov 13, 2009 at 12:48 PM, aris <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26374401&i=0" target="_top" rel="nofollow">aris@...</a>> wrote: <br>>   <br>>> I know i'm overusing your kindness but i'm searching from yesterday a way to <br>>> get the plain readable ascii text of the publicKey from the example you gave <br>>> me with no luck. <br>>> All i can get from the PGPPublicKey is the getEncoded byte array (which when <br>>> i convert to a string gives me encoded text) or the encode(outputstream) <br>>> function which also <br>>> writes to a file and i don't want that. <br>>> <br>>>     <br>> That ASCII text you are looking for is called PGP armour. It's <br>> basically base 64 encoded binary, where the binary is very likely the <br>> bytes you got from the encode() method. Could you have a look and <br>> report back if you can find encoders for PGP armoured files or base <br>> 64? <br>> <br>> Don't forget that programming is only a small part of development. <br>> Using google and doing research takes more time. These things can <br>> certainly be found after some good searches. Try and make sure you've <br>> tried everything before asking questions, and report what you've tried <br>> to do without our help. <br>> <br>> Kind regards, <br>> Maarten <br>> <br>> <br>>   </div>This is with base64 encoding of the byte array and the key is invalid. <br>gpg: invalid radix64 character 2D skipped <br>gpg: [don't know]: invalid packet (ctb=10) <br>gpg: read_block: read error: Invalid packet <br>gpg: no valid OpenPGP data found. <br>gpg: import from `ar.asc' failed: Invalid keyring <br>gpg: Total number processed: 0 <br><br><br>I've search and it's not exactly base64 but radix64 encoding that i need <br>to convert the byte array that i get from the bouncycastle api. <br>There are no radix64 available encoders out there, that means i must <br>make my own? It's not that hard but i'm confused as i would expect the <br>whole API to have something that can give you <br>the ascii public key without writing your own wrappers. surely i'm not <br>the only one who uses the API and has needed such functionality? <br><br>any help appreciated. <br>aris <br><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26370459 PGP Encrypting a stream without writing to a temporary file 2009-11-16T03:31:09Z 2009-11-16T03:31:09Z Matt Fellows <html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 11 (filtered medium)"> </head> <body lang=EN-GB link=blue vlink=purple> <div class=Section1> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>I’m attempting to encrypt an InputStream (It’s a ByteArrayInputStream but I’m hoping to make this a generic method so it hopefully won’t matter) with PGP.  I’ve taken the PGP examples which all use encrypt a file and attempted to modify them to read from a String in plaintext rather than a file.  It all seems to work fine except that when I try to decrypt the stream again, which has been written to a file in the mean-time I get the following exception: </span></font><u><font size=2 color=navy face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"; color:navy'>java.io.IOException</span></font></u><font size=2 color=red face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"; color:red'>: unknown object in stream: 57<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>I’m convinced this means that the encryption has failed as when I use the method in the example the decryption works fine.<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>I’ve basically taken the example code and replaced:<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>PGPUtil.writeFileToLiteralData(comData.open(cOut), PGPLiteralData.BINARY, new File(fileName), new byte[1 << 16]);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>With:<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>byte[] buffer = new byte[1 <<16];<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>PGPLiteralDataGenerator lData = new PGPLiteralDataGenerator();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>OutputStream            pOut = lData.open(out, PGPLiteralData.BINARY, PGPLiteralData.CONSOLE, PGPLiteralData.NOW, buffer);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>byte[]                  buf = new byte[buffer.length];<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>int                     len;<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>while ((len = in.read(buf)) > 0)<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>{<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>      pOut.write(buf, 0, len);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>}<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>lData.close();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>in.close();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>pOut.close();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>Where in is my input stream.  SO the whole method now looks like:<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>private static void encryptStream(<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                    OutputStream    out,<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                    InputStream     in,<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                    PGPPublicKey    encKey,<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                    boolean         armor,<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                    boolean         withIntegrityCheck)<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                    throws IOException, NoSuchProviderException<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>    {    <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        if (armor)<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        {<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            out = new ArmoredOutputStream(out);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        }<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        try<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        {    <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            PGPEncryptedDataGenerator   cPk = new PGPEncryptedDataGenerator(PGPEncryptedData.CAST5, withIntegrityCheck, new SecureRandom(), "BC");<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            cPk.addMethod(encKey);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            OutputStream                cOut = cPk.open(out, new byte[1 << 16]);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            PGPCompressedDataGenerator  comData = new PGPCompressedDataGenerator(<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                                                                    PGPCompressedData.ZIP);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            byte[] buffer = new byte[1 <<16];<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            PGPLiteralDataGenerator lData = new PGPLiteralDataGenerator();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            OutputStream            pOut = lData.open(out, PGPLiteralData.BINARY, PGPLiteralData.CONSOLE, PGPLiteralData.NOW, buffer);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            byte[]                  buf = new byte[buffer.length];<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            int                     len;<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            while ((len = in.read(buf)) > 0)<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            {<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                pOut.write(buf, 0, len);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            }<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            lData.close();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            in.close();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            pOut.close();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            //PGPUtil.writeFileToLiteralData(comData.open(cOut), PGPLiteralData.BINARY, new File(fileName), new byte[1 << 16]);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            comData.close();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            <o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            cOut.close();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            out.close();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        }<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        catch (PGPException e)<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        {<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            System.err.println(e);<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            if (e.getUnderlyingException() != null)<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            {<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>                e.getUnderlyingException().printStackTrace();<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>            }<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>        }<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>    }<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>Does anyone see anything that is obviously wrong with this?  I’m mostly thinking that the lData.open() method is the most likely place for an error, as that’s what I understand the least.<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>Kind regards,<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'>Matt<o:p></o:p></span></font></p> <p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> </div> <P>___________________________________________________________</P> <P>First Option's outgoing email policy is at <BR><A href="http://www.firstoption.net/emailpolicy.html" target="_top" rel="nofollow">http://www.firstoption.net/emailpolicy.html</A>, but a short summary is :-</P> <P>- all email/attachments are confidential; do not use, circulate or release <BR>without our consent</P> <P>- email is not authorised unless it is on First Option business</P> <P>- email is not binding unless it is from an authorised person<BR>and is signed with a digital certificate</P> <P>First Option Ltd. - Switchboard +44 (0) 1962 738200<BR>Signal House, Jacklyns Lane, Alresford, Hants, SO24 9JJ, United Kingdom. Registered Company No: 2453594<BR>___________________________________________________________</P> </body> </html> <p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26346585 Re: Error reading public key file 2009-11-13T18:35:32Z 2009-11-13T18:35:32Z David Hook-2 <br>In general armoured files are supposed to be able to survive been sent <br>by email with a 7bit encoding. The extra characters wouldn't be able to <br>do this (as in survive). Historically it's really PEM encoding. <br><br>Apart from that, section 6.2 of RFC 4880 states <br><br>"Note that all these Armor Header Lines are to consist of a complete <br> line.  That is to say, there is always a line ending preceding the <br> starting five dashes, and following the ending five dashes.  The <br> header lines, therefore, MUST start at the beginning of a line, and <br> MUST NOT have text other than whitespace following them on the same <br> line. " <br><br>So it would be fair to say that in the terms of the current RFC the 3 <br>characters that form the UTF-8 header preceding the first 5 dashes make <br>the file invalid. <br><br>Regards, <br><br>David <br><br>On Fri, 2009-11-13 at 22:39 +0100, Maarten Bodewes wrote: <div class='shrinkable-quote'><br>> <br>> <br>> On Fri, Nov 13, 2009 at 2:50 PM, Viet H. Phan <br>> <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26346585&i=0" target="_top" rel="nofollow">hoangvietphan@...</a>> wrote: <br>>         RFC4880 doesn't seem to say explicitly if UTF-8 BOM is valid <br>>         in ASCII-armored files. Do you think it's still <br>>         OpenPGP-compliant if we ignore UTF-8 BOM in ASCII-armored <br>>         files? <br>> <br>> Um, it would strike me as more logical to use some detection part in <br>> the software trying to read the files. Then you could store it in a <br>> buffer and present it as String or encoded ASCII to the BC library. <br>> UTF8 BOM does not seem to be a logical part for ASCII armoured files <br>> by definition. In the end it would be more helpful to fix the software <br>> that turns out illegally encoded keys instead. Illogical as though it <br>> may seem, the PGP armour is specified as a binary -> binary encoding <br>> in the RFC. That said, if it wasn't each and every software should <br>> support each and every character encoding used by each platform. <br>> <br>> Don't support non-standard compliant software - it's a sliding slope. <br>> </div><br><br><p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p> tag:old.nabble.com,2006:post-26343975 Re: Error reading public key file 2009-11-13T13:39:24Z 2009-11-13T13:39:24Z Maarten Bodewes <br><br><div class="gmail_quote">On Fri, Nov 13, 2009 at 2:50 PM, Viet H. Phan <span dir="ltr"><<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26343975&i=0" target="_top" rel="nofollow">hoangvietphan@...</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <span style="color: rgb(0, 0, 127);">RFC4880 doesn't seem to say explicitly if UTF-8 BOM is valid in ASCII-armored files. Do you think it's still OpenPGP-compliant if we ignore UTF-8 BOM in ASCII-armored files?</span></blockquote> </div><br>Um, it would strike me as more logical to use some detection part in the software trying to read the files. Then you could store it in a buffer and present it as String or encoded ASCII to the BC library. UTF8 BOM does not seem to be a logical part for ASCII armoured files by definition. In the end it would be more helpful to fix the software that turns out illegally encoded keys instead. Illogical as though it may seem, the PGP armour is specified as a binary -> binary encoding in the RFC. That said, if it wasn't each and every software should support each and every character encoding used by each platform.<br> <br>Don't support non-standard compliant software - it's a sliding slope.<br><br> <p>From forum: <a href="http://old.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>