tag:www.nabble.com,2006:forum-943Nabble - Bouncy Castle2008-12-03T21:38:38ZBouncy Castle Crypto APIs. Bouncy Castle home is <a href="http://www.bouncycastle.org/" target="_top" rel="nofollow">here</a>.tag:www.nabble.com,2006:post-20827682Can BC work with "RSA Legacy" key format?2008-12-03T03:35:01Z2008-12-03T21:38:38ZViet H. Phan<table cellspacing="0" cellpadding="0" border="0"><tr><td valign="top" style="font: inherit;"><span style="color: rgb(0, 0, 191);">Hi Experts,</span><br style="color: rgb(0, 0, 191);"><br style="color: rgb(0, 0, 191);"><span style="color: rgb(0, 0, 191);">I tried to use PGPPublicKeyRingCollection to read a public key and got the following error:<br><br><span style="color: rgb(255, 0, 0);"><a target="_blank" href="http://java.io.IO" rel="nofollow"><span class="yshortcuts" id="lw_1228369065_0">java.io</span></a>.IOException: invalid header encountered</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);"> at org.bouncycastle.bcpg.BCPGInputStream.readPacket(Unknown Source)</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);"> at org.bouncycastle.openpgp.PGPLiteralData.<init>(Unknown Source)</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0,
0);"> at org.bouncycastle.openpgp.PGPObjectFactory.nextObject(Unknown Source)</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);"> at org.bouncycastle.openpgp.PGPPublicKeyRingCollection.<init>(Unknown Source)</span><br style="color: rgb(255, 0, 0);"><br>I
imported that public key into PGP Desktop and saw that it had been
generated using "RSA Legacy" and IDEA algorithms (please see the
screenshot "keyprop.bmp").<br><br>Could you tell me what "RSA Legacy" keys are and if BC can work with "RSA Legacy" keys?<br><br>Thanks a lot,<br>Viet<br></span></td></tr></table><br>
<br /> <div class="small"><br/><img src="http://www.nabble.com/images/icon_attachment.gif" > <strong>keyprop.bmp</strong> (34K) <a href="http://www.nabble.com/attachment/20827682/0/keyprop.bmp" target="_top">Download Attachment</a></div><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20810168Re: ECDSA & X.5092008-12-03T02:13:29Z2008-12-03T02:13:29Zayman el-barbary<html><head></head><body><div style="font-family:times new roman,new york,times,serif;font-size:12pt">No I'm using BC in J2SE, BC already implements the ECC. you can use it directly<br><div> </div>Ayman<div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><div style="font-family: arial,helvetica,sans-serif; font-size: 10pt;"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> "<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20810168&i=0" target="_top" rel="nofollow">yunpu.zhu@...</a>" <<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20810168&i=1" target="_top" rel="nofollow">yunpu.zhu@...</a>><br><b><span style="font-weight: bold;">To:</span></b> ayman el-barbary <<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20810168&i=2" target="_top" rel="nofollow">ayman_eng2006@...</a>><br><b><span style="font-weight: bold;">Sent:</span></b> Wednesday, December 3, 2008 10:11:25 AM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: [dev-crypto] ECDSA & X.509<br></font><br>Did you use J2me to implement ECDSA.<br><br>Yunpu<br><br>ayman el-barbary wrote:<div class='shrinkable-quote'><br>>
Hello,<br>> <br>> Thanks David for your help, I know what's the wrong with my code, I entered some elliptic curve parameters in a wrong way. So the key I think was corrupted, then when I verified it the error appears, But I entered it correctly now.<br>> <br>> Thanks again, BEST REGARDS<br>> Ayman<br>> <br>> ------------------------------------------------------------------------<br>> *From:* David Hook <<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20810168&i=3" target="_top" rel="nofollow">dgh@...</a>><br>> *To:* ayman el-barbary <<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20810168&i=4" target="_top" rel="nofollow">ayman_eng2006@...</a>><br>> *Cc:* <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20810168&i=5" target="_top" rel="nofollow">dev-crypto@...</a><br>> *Sent:* Wednesday, December 3, 2008 4:48:58 AM<br>> *Subject:* Re: [dev-crypto] ECDSA & X.509<br>> <br>> <br>> An
error like this normally means that the key being used to verify the<br>> certificate is not the corresponding public key for the private key that<br>> signed it. Are you sure the correct key is being used?<br>> <br>> Regards,<br>> <br>> David<br>> <br>> On Sun, 2008-11-30 at 01:21 -0800, ayman el-barbary wrote:<br>> > Hello all<br>> > > I have generated a X.509 certificate using bouncy castle generator and<br>> > i used the ECDSA as the signature algorithm in the certificate.<br>> ><br>> > The certificate is already generated, but when i verify it using<br>> > bouncy castle only signature exception appears, which mean the<br>> > certificate has an invalid signature.<br>> ><br>> > So, What is the problem now, how the certificate generated<br>> > successfully and then when i verify it gives me invalid signature?<br>> ><br>> > Can you help me please.<br>>
><br>> > Thanks in advance<br>> > BEST REGARDS<br>> ><br>> > Ayman<br>> ><br>> ><br>> ><br>> ><br>> ><br>> ><br>> ><br>> ><br>> ><br>> ><br>> ><br>> <br>> <br>> </div><br><br>-- **********************************************<br>Yunpu Zhu<br>Master of Science Candidate<br>Department of Mathematics and Computer Science<br>Sun Campus Ambassador<br>Webmaster, Graduate Student Association<br>University of Lethbridge<br>Office:(403)317 - 2831<br>Email :<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20810168&i=6" target="_top" rel="nofollow">yunpu.zhu@...</a><br><a href="http://blogs.sun.com/yunpu" target="_blank" rel="nofollow">http://blogs.sun.com/yunpu</a><br><br></div></div></div><br>
</body></html><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20807900Re: ECDSA & X.5092008-12-02T23:09:10Z2008-12-02T23:09:10Zayman el-barbary<html><head></head><body><div style="font-family:times new roman,new york,times,serif;font-size:12pt">Hello,<br><br>Thanks David for your help, I know what's the wrong with my code, I entered some elliptic curve parameters in a wrong way. So the key I think was corrupted, then when I verified it the error appears, But I entered it correctly now.<br><br>Thanks again, BEST REGARDS<br><div> </div>Ayman<div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><div style="font-family: arial,helvetica,sans-serif; font-size: 10pt;"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> David Hook <<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20807900&i=0" target="_top" rel="nofollow">dgh@...</a>><br><b><span style="font-weight: bold;">To:</span></b> ayman el-barbary <<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20807900&i=1" target="_top" rel="nofollow">ayman_eng2006@...</a>><br><b><span style="font-weight: bold;">Cc:</span></b> <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20807900&i=2" target="_top" rel="nofollow">dev-crypto@...</a><br><b><span style="font-weight: bold;">Sent:</span></b> Wednesday, December 3, 2008 4:48:58 AM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: [dev-crypto] ECDSA & X.509<br></font><br><br>An error like this normally means that the key being used to verify the<br>certificate is not the corresponding public key for the private key that<br>signed it. Are you sure the correct key is being used?<br><br>Regards,<br><br>David<br><br>On Sun, 2008-11-30 at 01:21 -0800, ayman el-barbary wrote:<div class='shrinkable-quote'><br>> Hello all<br>> <br>> I have generated a X.509 certificate using bouncy castle generator and<br>> i used the ECDSA as the signature algorithm in the certificate.<br>> <br>> The certificate is already generated, but when i verify it using<br>> bouncy castle only signature exception appears, which mean the<br>> certificate has an invalid signature.<br>> <br>> So, What is the problem now, how the certificate generated<br>>
successfully and then when i verify it gives me invalid signature?<br>> <br>> Can you help me please.<br>> <br>> Thanks in advance<br>> BEST REGARDS<br>> <br>> Ayman<br>> <br>> <br>> <br>> <br>> <br>> <br>> <br>> <br>> <br>> <br>> </div><br><br></div></div></div><br>
</body></html><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20805240Re: ECDSA & X.5092008-12-02T17:48:58Z2008-12-02T17:48:58ZDavid Hook-2<br>An error like this normally means that the key being used to verify the
<br>certificate is not the corresponding public key for the private key that
<br>signed it. Are you sure the correct key is being used?
<br><br>Regards,
<br><br>David
<br><br>On Sun, 2008-11-30 at 01:21 -0800, ayman el-barbary wrote:
<div class='shrinkable-quote'><br>> Hello all
<br>>
<br>> I have generated a X.509 certificate using bouncy castle generator and
<br>> i used the ECDSA as the signature algorithm in the certificate.
<br>>
<br>> The certificate is already generated, but when i verify it using
<br>> bouncy castle only signature exception appears, which mean the
<br>> certificate has an invalid signature.
<br>>
<br>> So, What is the problem now, how the certificate generated
<br>> successfully and then when i verify it gives me invalid signature?
<br>>
<br>> Can you help me please.
<br>>
<br>> Thanks in advance
<br>> BEST REGARDS
<br>>
<br>> Ayman
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
</div><br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20805199Re: SMIME and OpenPGP2008-12-02T17:46:28Z2008-12-02T17:46:28ZDavid Hook-2<br>BC already supports OpenPGP - have a look in the latest releases area.
<br>The OpenPGP package is in the files starting with bcpg.
<br><br>Regards,
<br><br>David
<br><br>On Tue, 2008-12-02 at 15:46 -0200, Carolina Pascual wrote:
<div class='shrinkable-quote'><br>> Hello,
<br>>
<br>> We are working in a java project in which we need to process signed
<br>> and encrypted mails, supporting both SMIME and OpenPGP.
<br>> For SMIME we are using the BouncyCastle libraries successfully. For
<br>> OpenPGP the only provider that we found is Cryptix.
<br>> Also we found an Api <a href="http://javamail-crypto.sourceforge.net/" target="_top" rel="nofollow">http://javamail-crypto.sourceforge.net/</a> that
<br>> support both using BouncyCastle and Cryptix, but we don't know if it
<br>> is longer maintained.
<br>>
<br>> We also use BouncyCastle for encrypt decrypt and verify files succesfully.
<br>>
<br>> We would like to know if you are planning to add support for OpenPGP,
<br>> otherwise if you have some recommendations about that issue we will be
<br>> very grateful.
<br>>
<br>> Thanks very much,
<br>> Carolina
<br>>
</div><br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20797369SMIME and OpenPGP2008-12-02T09:46:33Z2008-12-02T09:46:33ZCarolina PascualHello,
<br><br>We are working in a java project in which we need to process signed
<br>and encrypted mails, supporting both SMIME and OpenPGP.
<br>For SMIME we are using the BouncyCastle libraries successfully. For
<br>OpenPGP the only provider that we found is Cryptix.
<br>Also we found an Api <a href="http://javamail-crypto.sourceforge.net/" target="_top" rel="nofollow">http://javamail-crypto.sourceforge.net/</a> that
<br>support both using BouncyCastle and Cryptix, but we don't know if it
<br>is longer maintained.
<br><br>We also use BouncyCastle for encrypt decrypt and verify files succesfully.
<br><br>We would like to know if you are planning to add support for OpenPGP,
<br>otherwise if you have some recommendations about that issue we will be
<br>very grateful.
<br><br>Thanks very much,
<br>Carolina
<br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20767529Re: manual signing2008-12-01T00:03:12Z2008-12-01T00:03:12ZstiftHello Pete and Dave,
<br><br>thx a lot with some changes in my code i get the same signature by using the Digestinfo (instead of only using the hash) for signing.
<br>Greets,
<br>Gerald
<br><br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color">
<div class="quote-author" style="font-weight: bold;">Peter Dettman-2 wrote:</div>
<div class="quote-message shrinkable-quote">As Dave pointed out, you need to use DigestInfo.
<br><br>Have a look at the BC source:
<br> org.bouncycastle.crypto.signers.RSADigestSigner.generateSignature()
<br><br>Cheers,
<br>Pete.
<br><br><br>Gerald wrote:
<br>>
<br>> Hello,
<br>>
<br>>
<br>>
<br>> ive a problem to signing files manual. I want to do every step
<br>> manually, so the user of the program can change hash alg, padding, and
<br>> encryption (RSA) with keylen.
<br>>
<br>> The first code sample is the normal way to sign and in the second i do
<br>> it on my own.
<br>>
<br>> But ive the problem, that the result of both samples are different...
<br>> L Can you please help me and say where my failure is?
<br>>
<br>>
<br>>
<br>>
<br>>
<br>> 1.
<br>>
<br>> Signature sig = Signature.getInstance("MD5WithRSA","BC");
<br>>
<br>> sig.initSign(keypair.getPrivate());
<br>>
<br>> sig.update(bytesToSign);
<br>>
<br>> System.out.println(new BigInteger(1,sig.sign()).toString(16));
<br>>
<br>>
<br>>
<br>> 2.
<br>>
<br>> MessageDigest md5 = MessageDigest.getInstance("MD5","BC");
<br>>
<br>> md5.update(bytesToSign);
<br>>
<br>> bytesToSign= md5.digest();
<br>>
<br>> System.out.println(new BigInteger(1,bytesToSign).toString(16));
<br>>
<br>>
<br>>
<br>> Cipher cipher =
<br>> Cipher.getInstance("RSA/NONE/PKCS1Padding","BC");
<br>>
<br>> cipher.init(Cipher.ENCRYPT_MODE,keypair.getPrivate() );
<br>>
<br>> System.out.println(new
<br>> BigInteger(1,cipher.doFinal(bytesToSign)).toString(16));
<br>>
<br>>
<br>>
<br>> Greetings Gerald
<br>>
<br></div>
</div></blockquote>
<p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20755788ECDSA & X.5092008-11-30T01:21:29Z2008-11-30T01:21:29Zayman el-barbary<html><head></head><body><div style="font-family:times new roman,new york,times,serif;font-size:12pt">Hello all<br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif;
font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt; color: rgb(0, 0, 0);"><div> </div>I have generated a X.509
certificate using bouncy castle generator and i used the ECDSA as the signature algorithm in the certificate.<br><br>The certificate is already generated, but when i verify it using bouncy castle only signature exception appears, which mean the
certificate has an invalid signature.<br><br>So, What is the problem now, how the certificate generated successfully and then when i verify it gives me invalid signature?<br><br>Can you help me please.<br><br>Thanks in
advance<br>BEST REGARDS<br><br>Ayman<br><div><br></div></div><br>
</div></div></div><br>
</div></div></div><br>
</div></div></div><br>
</div></div></div><br>
</body></html><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20755449Unsubscribe2008-11-30T00:22:23Z2008-11-30T00:22:23Zm.ganguli<table cellspacing="0" cellpadding="0" border="0"><tr><td valign="top" style="font: inherit;"><BR>thanks,<BR><EM><FONT face="comic sans ms" color=#794a72 size=6><STRONG>Maumita Ganguli</STRONG></FONT></EM></td></tr></table><br>
<!--6--><hr size=1></hr> Add more friends to your messenger and enjoy! <a href="http://in.rd.yahoo.com/tagline_messenger_6/*http://messenger.yahoo.com/invite/" target="_top" rel="nofollow"> Invite them now.</a><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20749417Re: Problem using BigInteger class of BouncyCastle on mobile2008-11-29T09:35:32Z2008-11-29T09:35:32ZNagy Tibor-2Thanks! Really, everything works after obfuscating as described in FAQ.
<br><br>Martijn Brinkers írta:
<div class='shrinkable-quote'><div class='shrinkable-quote'><br>> I guess you already checked the FAQ? ;)
<br>>
<br>> <a href="http://bouncycastle.org/wiki/display/JA1/Frequently+Asked+Questions" target="_top" rel="nofollow">http://bouncycastle.org/wiki/display/JA1/Frequently+Asked+Questions</a><br>>
<br>> 3. I am using the lightweight library to create some MIDlets and my
<br>> device/simulator is complaining about creation of classes in the Java
<br>> package (such as java/math/BigInteger, java/security/SecureRandom,
<br>> java/io/FilterInputStream), don't you Bouncy Castle guys know that's not
<br>> allowed?
<br>>
<br>>
<br>>
<br>> On Fri, 2008-11-28 at 15:17 +0100, Nagy Tibor wrote:
<br>>> If I import the BigInteger class of BouncyCastle's lightway API for J2ME
<br>>> I get an unhandled exception on my Nokia mobile (6120 classic) and also
<br>>> on the phone emulator of NetBeans:
<br>>>
<br>>> java.lang.NoClassDefFoundError: java/math/BigInteger: Cannot create
<br>>> class in system package
<br>>> at org.bouncycastle.crypto.test.RSATest.<clinit>(+0)
<br>>> at java.lang.Class.runCustomCode(+0)
<br>>> at HelloMIDlet.startApp(+4)
<br>>> at
<br>>> javax.microedition.midlet.MIDletProxy.startApp(MIDletProxy.java:44)
<br>>> at com.sun.midp.midlet.Scheduler.schedule(+270)
<br>>> at com.sun.midp.main.Main.runLocalClass(+28)
<br>>> at com.sun.midp.main.Main.main(+80)
<br>>>
<br>>> As I see, the problem is, that the mobile environment does not allow any
<br>>> new class in "java/..." for security reason. Is there any quick
<br>>> solution? Of course I could change all "java.math..." e.g. to
<br>>> "org.bouncycastle.java.math..." in all sources, but I don't want to do
<br>>> this changes at every new vesrion, etc.
<br>>>
<br>>> Every help is appreciated
<br>>>
<br>>> Tibor
<br>>>
<br>>> PS: I am new in using BouncyCastle API
<br>>
<br>>
</div></div><br /> <div class="small"><br/><img src="http://www.nabble.com/images/icon_attachment.gif" > <strong>smime.p7s</strong> (4K) <a href="http://www.nabble.com/attachment/20749417/0/smime.p7s" target="_top">Download Attachment</a></div><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20736346Unsubscribe2008-11-28T07:24:18Z2008-11-28T07:24:18ZBellani--
<br>Eduardo Bellani
<br><br>www.cnxs.com.br
<br><br>"What is hateful to you, do not to your fellow men. That is the entire
<br>Law; all the rest is commentary." The Talmud
<br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20735475Re: Problem using BigInteger class of BouncyCastle on mobile2008-11-28T06:27:24Z2008-11-28T06:27:24ZMartijn Brinkers (List)-2I guess you already checked the FAQ? ;)
<br><br><a href="http://bouncycastle.org/wiki/display/JA1/Frequently+Asked+Questions" target="_top" rel="nofollow">http://bouncycastle.org/wiki/display/JA1/Frequently+Asked+Questions</a><br><br>3. I am using the lightweight library to create some MIDlets and my
<br>device/simulator is complaining about creation of classes in the Java
<br>package (such as java/math/BigInteger, java/security/SecureRandom,
<br>java/io/FilterInputStream), don't you Bouncy Castle guys know that's not
<br>allowed?
<br><br><br><br>On Fri, 2008-11-28 at 15:17 +0100, Nagy Tibor wrote:
<div class='shrinkable-quote'><br>> If I import the BigInteger class of BouncyCastle's lightway API for J2ME
<br>> I get an unhandled exception on my Nokia mobile (6120 classic) and also
<br>> on the phone emulator of NetBeans:
<br>>
<br>> java.lang.NoClassDefFoundError: java/math/BigInteger: Cannot create
<br>> class in system package
<br>> at org.bouncycastle.crypto.test.RSATest.<clinit>(+0)
<br>> at java.lang.Class.runCustomCode(+0)
<br>> at HelloMIDlet.startApp(+4)
<br>> at
<br>> javax.microedition.midlet.MIDletProxy.startApp(MIDletProxy.java:44)
<br>> at com.sun.midp.midlet.Scheduler.schedule(+270)
<br>> at com.sun.midp.main.Main.runLocalClass(+28)
<br>> at com.sun.midp.main.Main.main(+80)
<br>>
<br>> As I see, the problem is, that the mobile environment does not allow any
<br>> new class in "java/..." for security reason. Is there any quick
<br>> solution? Of course I could change all "java.math..." e.g. to
<br>> "org.bouncycastle.java.math..." in all sources, but I don't want to do
<br>> this changes at every new vesrion, etc.
<br>>
<br>> Every help is appreciated
<br>>
<br>> Tibor
<br>>
<br>> PS: I am new in using BouncyCastle API
</div><br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20735125Problem using BigInteger class of BouncyCastle on mobile2008-11-28T06:17:54Z2008-11-28T06:17:54ZNagy Tibor-2If I import the BigInteger class of BouncyCastle's lightway API for J2ME
<br>I get an unhandled exception on my Nokia mobile (6120 classic) and also
<br>on the phone emulator of NetBeans:
<br><br>java.lang.NoClassDefFoundError: java/math/BigInteger: Cannot create
<br>class in system package
<br> at org.bouncycastle.crypto.test.RSATest.<clinit>(+0)
<br> at java.lang.Class.runCustomCode(+0)
<br> at HelloMIDlet.startApp(+4)
<br> at
<br>javax.microedition.midlet.MIDletProxy.startApp(MIDletProxy.java:44)
<br> at com.sun.midp.midlet.Scheduler.schedule(+270)
<br> at com.sun.midp.main.Main.runLocalClass(+28)
<br> at com.sun.midp.main.Main.main(+80)
<br><br>As I see, the problem is, that the mobile environment does not allow any
<br>new class in "java/..." for security reason. Is there any quick
<br>solution? Of course I could change all "java.math..." e.g. to
<br>"org.bouncycastle.java.math..." in all sources, but I don't want to do
<br>this changes at every new vesrion, etc.
<br><br>Every help is appreciated
<br><br>Tibor
<br><br>PS: I am new in using BouncyCastle API
<br><br /> <div class="small"><br/><img src="http://www.nabble.com/images/icon_attachment.gif" > <strong>smime.p7s</strong> (4K) <a href="http://www.nabble.com/attachment/20735125/0/smime.p7s" target="_top">Download Attachment</a></div><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20728462Re: manual signing2008-11-27T19:19:16Z2008-11-27T19:19:16ZPeter Dettman-2<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
As Dave pointed out, you need to use DigestInfo.<br>
<br>
Have a look at the BC source:<br>
org.bouncycastle.crypto.signers.RSADigestSigner.generateSignature()<br>
<br>
Cheers,<br>
Pete.<br>
<br>
<br>
Gerald wrote:
<blockquote cite="mid:001501c95058$77c0fbd0$6742f370$@de" type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">ive a problem to signing files manual. I want to
do every
step manually, so the user of the program can change hash alg, padding,
and
encryption (RSA) with keylen.<o:p></o:p></p>
<p class="MsoNormal">The first code sample is the normal way to sign
and in the
second i do it on my own.<o:p></o:p></p>
<p class="MsoNormal">But ive the problem, that the result of both
samples are
different… <span style="font-family: Wingdings;">L</span> Can you
please
help me and say where my failure is?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-family: "Century","serif";">1.<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
Signature sig =
Signature.getInstance("MD5WithRSA","BC");<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
sig.initSign(keypair.getPrivate());<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
sig.update(bytesToSign);<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
System.out.println(new BigInteger(1,sig.sign()).toString(16));<o:p></o:p></span></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">2.<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
MessageDigest md5 = MessageDigest.getInstance("MD5","BC");<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
md5.update(bytesToSign);<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
bytesToSign= md5.digest();<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
System.out.println(new BigInteger(1,bytesToSign).toString(16));<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
Cipher cipher =
Cipher.getInstance("RSA/NONE/PKCS1Padding","BC");
<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
cipher.init(Cipher.ENCRYPT_MODE,keypair.getPrivate() );<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family: "Century","serif";">
System.out.println(new
BigInteger(1,cipher.doFinal(bytesToSign)).toString(16));<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Greetings Gerald<o:p></o:p></p>
</div>
</blockquote>
<br>
</body>
</html>
<p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20727606Re: Licensing question2008-11-27T16:55:42Z2008-11-27T16:55:42ZDavid Hook-2<br>2, 3, and 4 is enough.
<br><br>Regards,
<br><br>David
<br><br>On Thu, 2008-11-27 at 10:48 +0100, <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20727606&i=0" target="_top" rel="nofollow">Massimiliano_Ziccardi@...</a>
<br>wrote:
<div class='shrinkable-quote'><br>>
<br>> Hi all.
<br>>
<br>> We are building an Eclipse RCP application, and we'd like to use
<br>> bouncycastle.
<br>>
<br>> To be used from our RCP plugins, we need to bundle bouncycastle's jars
<br>> inside our plugin. However, this way, bouncycastle's jars are not
<br>> visible anymore (
<br>> without unzipping our plugin jar).
<br>>
<br>> Would be enough to be compliant to bouncycastle licence to:
<br>> 1) Create a plugin called org.bouncycastle, containing the original
<br>> bouncycastle's jars (this way, there will be a org.bouncycastle.jar
<br>> plugin file)
<br>> 2) Put inside the LICENSE directory the bouncycastle LICENSE
<br>> 3) Explicitly refer to the bouncycastle license inside our product
<br>> license
<br>> 4) Put a statement like this in the LICENSE: "This product contains
<br>> software developed by The Legion Of BouncyCastle
<br>> (www.bouncycastle.org)"
<br>>
<br>> ?
<br>>
<br>> We won't provide the source code.
<br>>
<br>> Thank you in advance.
<br>>
<br>> Massimiliano Ziccardi
<br>>
<br>>
<br>>
<br>>
<br>> ______________________________________________________________________
<br>>
<br>>
<br>>
<br>> SPECIALE NORMATIVE: Fattura Elettronica obbligatoria verso la Pubblica
<br>> Amministrazione
<br>>
<br>> <a href="http://www.intesa.it" target="_top" rel="nofollow">http://www.intesa.it</a><br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>> ______________________________________________________________________
</div><br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20727580Re: manual signing2008-11-27T16:53:32Z2008-11-27T16:53:32ZDavid Hook-2<br>The hash is supposed to be embedded in a DigestInfo object. You find the
<br>details in the PKCS#1 document available at RSA.
<br><br><a href="http://www.rsa.com/rsalabs/node.asp?id=2125" target="_top" rel="nofollow">http://www.rsa.com/rsalabs/node.asp?id=2125</a><br><br>Regards,
<br><br>David
<br><br>On Thu, 2008-11-27 at 07:22 +0100, Gerald wrote:
<div class='shrinkable-quote'><br>> Hello,
<br>>
<br>>
<br>>
<br>> ive a problem to signing files manual. I want to do every step
<br>> manually, so the user of the program can change hash alg, padding, and
<br>> encryption (RSA) with keylen.
<br>>
<br>> The first code sample is the normal way to sign and in the second i do
<br>> it on my own.
<br>>
<br>> But ive the problem, that the result of both samples are different… L
<br>> Can you please help me and say where my failure is?
<br>>
<br>>
<br>>
<br>>
<br>>
<br>> 1.
<br>>
<br>> Signature sig = Signature.getInstance("MD5WithRSA","BC");
<br>>
<br>> sig.initSign(keypair.getPrivate());
<br>>
<br>> sig.update(bytesToSign);
<br>>
<br>> System.out.println(new BigInteger(1,sig.sign()).toString(16));
<br>>
<br>>
<br>>
<br>> 2.
<br>>
<br>> MessageDigest md5 = MessageDigest.getInstance("MD5","BC");
<br>>
<br>> md5.update(bytesToSign);
<br>>
<br>> bytesToSign= md5.digest();
<br>>
<br>> System.out.println(new BigInteger(1,bytesToSign).toString(16));
<br>>
<br>>
<br>>
<br>> Cipher cipher =
<br>> Cipher.getInstance("RSA/NONE/PKCS1Padding","BC");
<br>>
<br>> cipher.init(Cipher.ENCRYPT_MODE,keypair.getPrivate() );
<br>>
<br>> System.out.println(new
<br>> BigInteger(1,cipher.doFinal(bytesToSign)).toString(16));
<br>>
<br>>
<br>>
<br>> Greetings Gerald
<br>>
<br>>
</div><br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20716940Re: How can I add Provider BC without copy bcprov.jar to jre\lib\ext2008-11-27T02:41:17Z2008-11-27T02:41:17ZMassimiliano_Ziccardi
<br><font size=2 face="sans-serif">Security.addProvider(new BouncyCastleProvider());</font>
<br>
<br><font size=2 face="sans-serif">should do the trick.</font>
<br>
<br><font size=2 face="sans-serif">Massimiliano Ziccardi<br>
</font>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=40%><font size=1 face="sans-serif"><b>Thomas Fromm <<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20716940&i=0" target="_top" rel="nofollow">tf@...</a>></b>
</font>
<p><font size=1 face="sans-serif">11/27/2008 11:28 AM</font>
<td width=59%>
<table width=100%>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td><font size=1 face="sans-serif">Undisclosed.Recipients: ;</font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td><font size=1 face="sans-serif"><a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20716940&i=1" target="_top" rel="nofollow">dev-crypto@...</a></font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td><font size=1 face="sans-serif">Re: [dev-crypto] How can I add Provider
BC without copy bcprov.jar to jre\lib\ext</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br><tt><font size=2>On Thursday 27 November 2008 10:11, <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20716940&i=2" target="_top" rel="nofollow">M.Schilling@...</a>
wrote:<br>
> Hi, how can I add the Provider Bouncy Castle to java security, without<br>
> copy the bcprov.jar to the Folder jre\lib\ext?<br>
<br>
Inside your classpath should also work. But the signed bcprov.jar must
be left <br>
untouched.<br>
<br>
> Can I add them only from Code? Because not every client,who use my<br>
> application, has the permission and the skill to add do this.<br>
<br>
You can register the provider inside your source. <br>
<br>
> I'm developing a GUI-Tool to decrypt PGP - encrypted files, that should<br>
> run on clients that not have administrator permissions of their OS.<br>
><br>
> Can anyone show me a way how I can solve this problem?<br>
<br>
Putting the bcprov.jar into your local classpath and register the <br>
provider in source should avoid putting the bcprov.jar into the lib/ext/
<br>
directory of the jvm and modify the java.sceurity.<br>
<br>
-- <br>
inubit AG - integrating your business and IT </font></tt><a href=http://www.inubit.com target="_top" rel="nofollow" /><tt><font size=2>http://www.inubit.com</font></tt></a><tt><font size=2><br>
Vorstand: Dr. Torsten Schmale (Vorsitzender)<br>
Vorsitzender des Aufsichtsrates: Dr. Wolf-Dieter Klemt<br>
Registergericht: AG Charlottenburg / Registernummer: HRB 80154<br>
<br>
</font></tt>
<br><font size=3 face="sans-serif"><br>
<br>
<br>
</font>
<hr>
<p><font size=3 face="sans-serif"><br>
</font>
<br>
<p><font size=3 face="sans-serif">SPECIALE NORMATIVE: Fattura Elettronica
obbligatoria verso la Pubblica Amministrazione<br>
</font><font size=3 color=blue face="sans-serif"><u><br>
</u></font><a href=http://www.intesa.it target="_top" rel="nofollow" /><font size=3 color=blue face="sans-serif"><u>http://www.intesa.it</u></font></a><font size=3 face="sans-serif"><br>
</font>
<p>
<br>
<br>
<p><font size=3 face="sans-serif"><br>
<br>
<br>
</font>
<hr><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20716710Re: How can I add Provider BC without copy bcprov.jar to jre\lib\ext2008-11-27T02:27:11Z2008-11-27T02:27:11ZThomas Fromm-2On Thursday 27 November 2008 10:11, <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20716710&i=0" target="_top" rel="nofollow">M.Schilling@...</a> wrote:
<br>> Hi, how can I add the Provider Bouncy Castle to java security, without
<br>> copy the bcprov.jar to the Folder jre\lib\ext?
<br><br>Inside your classpath should also work. But the signed bcprov.jar must be left
<br>untouched.
<br><br>> Can I add them only from Code? Because not every client,who use my
<br>> application, has the permission and the skill to add do this.
<br><br>You can register the provider inside your source.
<br><br>> I'm developing a GUI-Tool to decrypt PGP - encrypted files, that should
<br>> run on clients that not have administrator permissions of their OS.
<br>>
<br>> Can anyone show me a way how I can solve this problem?
<br><br>Putting the bcprov.jar into your local classpath and register the
<br>provider in source should avoid putting the bcprov.jar into the lib/ext/
<br>directory of the jvm and modify the java.sceurity.
<br><br>--
<br>inubit AG - integrating your business and IT <a href="http://www.inubit.com" target="_top" rel="nofollow">http://www.inubit.com</a><br>Vorstand: Dr. Torsten Schmale (Vorsitzender)
<br>Vorsitzender des Aufsichtsrates: Dr. Wolf-Dieter Klemt
<br>Registergericht: AG Charlottenburg / Registernummer: HRB 80154
<br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20716231Licensing question2008-11-27T01:48:51Z2008-11-27T01:48:51ZMassimiliano_Ziccardi
<br><font size=2 face="sans-serif">Hi all.</font>
<br>
<br><font size=2 face="sans-serif">We are building an Eclipse RCP application,
and we'd like to use bouncycastle.</font>
<br>
<br><font size=2 face="sans-serif">To be used from our RCP plugins, we
need to bundle bouncycastle's jars inside our plugin. However, this way,
bouncycastle's jars are not visible anymore (</font>
<br><font size=2 face="sans-serif">without unzipping our plugin jar).</font>
<br>
<br><font size=2 face="sans-serif">Would be enough to be compliant to bouncycastle
licence to:</font>
<br><font size=2 face="sans-serif">1) Create a plugin called org.bouncycastle,
containing the original bouncycastle's jars (this way, there will be a
org.bouncycastle.jar plugin file)</font>
<br><font size=2 face="sans-serif">2) Put inside the LICENSE directory
the bouncycastle LICENSE</font>
<br><font size=2 face="sans-serif">3) Explicitly refer to the bouncycastle
license inside our product license</font>
<br><font size=2 face="sans-serif">4) Put a statement like this in the
LICENSE: "This product contains software developed by The Legion Of
BouncyCastle (</font><a href=www.bouncycastle.org target="_top" rel="nofollow"><font size=2 face="sans-serif">www.bouncycastle.org</font></a><font size=2 face="sans-serif">)"</font>
<br>
<br><font size=2 face="sans-serif">?</font>
<br>
<br><font size=2 face="sans-serif">We won't provide the source code.</font>
<br>
<br><font size=2 face="sans-serif">Thank you in advance.</font>
<br>
<br><font size=2 face="sans-serif">Massimiliano Ziccardi<br>
</font><font size=3 face="sans-serif"><br>
<br>
<br>
</font>
<hr>
<p><font size=3 face="sans-serif"><br>
</font>
<br>
<p><font size=3 face="sans-serif">SPECIALE NORMATIVE: Fattura Elettronica
obbligatoria verso la Pubblica Amministrazione<br>
</font><font size=3 color=blue face="sans-serif"><u><br>
</u></font><a href=http://www.intesa.it target="_top" rel="nofollow" /><font size=3 color=blue face="sans-serif"><u>http://www.intesa.it</u></font></a><font size=3 face="sans-serif"><br>
</font>
<p>
<br>
<br>
<p><font size=3 face="sans-serif"><br>
<br>
<br>
</font>
<hr><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20715712How can I add Provider BC without copy bcprov.jar to jre\lib\ext2008-11-27T01:11:43Z2008-11-27T01:11:43ZM.Schilling
<br><font size=2 face="sans-serif">Hi, how can I add the Provider Bouncy
Castle to java security, without copy the bcprov.jar to the Folder jre\lib\ext?</font>
<br>
<br><font size=2 face="sans-serif">Can I add them only from Code? Because
not every client,who use my application, has the permission and the skill
to add do this.</font>
<br>
<br><font size=2 face="sans-serif">I'm developing a GUI-Tool to decrypt
PGP - encrypted files, that should run on clients that not have administrator
permissions of their OS.</font>
<br>
<br><font size=2 face="sans-serif">Can anyone show me a way how I can solve
this problem?</font>
<br>
<br><font size=2 face="sans-serif">Greetings,</font>
<br><font size=2 face="sans-serif">Marc Schilling</font><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20714143manual signing2008-11-26T22:22:03Z2008-11-26T22:22:03Zstift<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=DE link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Hello,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>ive a problem to signing files manual. I want to do every
step manually, so the user of the program can change hash alg, padding, and
encryption (RSA) with keylen.<o:p></o:p></p>
<p class=MsoNormal>The first code sample is the normal way to sign and in the
second i do it on my own.<o:p></o:p></p>
<p class=MsoNormal>But ive the problem, that the result of both samples are
different… <span style='font-family:Wingdings'>L</span> Can you please
help me and say where my failure is?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-family:"Century","serif"'>1.<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
Signature sig =
Signature.getInstance("MD5WithRSA","BC");<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
sig.initSign(keypair.getPrivate());<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
sig.update(bytesToSign);<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
System.out.println(new BigInteger(1,sig.sign()).toString(16));<o:p></o:p></span></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>2.<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
MessageDigest md5 = MessageDigest.getInstance("MD5","BC");<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
md5.update(bytesToSign);<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
bytesToSign= md5.digest();<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
System.out.println(new BigInteger(1,bytesToSign).toString(16));<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
Cipher cipher =
Cipher.getInstance("RSA/NONE/PKCS1Padding","BC");
<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
cipher.init(Cipher.ENCRYPT_MODE,keypair.getPrivate() );<o:p></o:p></span></p>
<p class=MsoPlainText><span style='font-family:"Century","serif"'>
System.out.println(new BigInteger(1,cipher.doFinal(bytesToSign)).toString(16));<o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Greetings Gerald<o:p></o:p></p>
</div>
</body>
</html>
<p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20707563Re: ECDSA's J2me implementation's performance evaluation2008-11-26T11:29:47Z2008-11-26T11:29:47ZMarkus KilåsI have just started to do some performance measurements on signature
<br>verification using Bouncy Castle in J2ME and JSR-177 (SATSA-CRYPTO).
<br><br>At a first look it seams that the ECDSA is a lot slower than both RSA
<br>and DSA.
<br><br>When verifying X.509-certificates signed by different algorithms and
<br>running in the emulator verifying using ECDSA (P-192, SHA-1) takes about
<br>3000ms, DSA (1024-bit) about 500ms and RSA (RSASSA-PKCS1 1024-bit) only
<br>50ms.
<br><br>I'm not sure if I will also look at signing and key generation.
<br><br><br>Regards,
<br>Markus
<br><br><br><a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20707563&i=0" target="_top" rel="nofollow">yunpu.zhu@...</a> skrev:
<div class='shrinkable-quote'><br>> Hi there,
<br>>
<br>> Did anyone make some performance evaluation on ECDSA implemented in BC?
<br>> If we implemented ECDSA with J2ME: generating Key Pair, signing in CLDC
<br>> mobile devices, and verifying it in rich resources' computer. How are
<br>> the speed in J2ME implementation?
<br>>
<br>> Hope anybody can join this discussion.
<br>>
<br>> Thanks
<br>>
<br>> Yunpu
<br>>
<br>>
</div><br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20696502Re: Please verify Smime2008-11-26T00:12:44Z2008-11-26T00:12:44ZCorné A<div>Martijn thanks for your help,<br><br>The CA tells me its a PKCS p7b but as far as i know a opaque s/mime signed message is a p7m?!</div>
<div> </div>
<div>regards,</div>
<div>Corné<br> </div>
<div class="gmail_quote">2008/11/25 Martijn Brinkers <span dir="ltr"><<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20696502&i=0" target="_top" rel="nofollow">martijn.list@...</a>></span><br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">The base64 encoded blob contains a opaque s/mime signed message with a<br>application/pkcs10 attachment. The details of the message are shown<br>
below.<br><br><br>Regards,<br><br>Martijn Brinkers<br><br><br>*** details of signed message ***<br><br>Signed message<br><br>CMSVersion: 1<br><br>*** [Signer 0] ***<br><br>CMS Version: 1<br><br>*** [SignerId] ***<br>Issuer: EMAILADDRESS=<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20696502&i=1" target="_top" rel="nofollow">info@...</a>, CN=DigiNotar Public CA,<br>
O=DigiNotar, C=NL<br>Serial number: 41BDAC7E<br>SubjectKeyIdentifier: null<br><br>Digest: SHA-1<br>Encryption alg. OID: 1.2.840.113549.1.1.1<br>Signing time: Mon Oct 27 09:19:31 GMT 2008<br><br>Signed attributes:<br>DER Sequence<br>
ObjectIdentifier(1.2.840.113549.1.9.4)<br> DER Set<br> DER Octet String[20]<br>DER Sequence<br> ObjectIdentifier(1.2.840.113549.1.9.3)<br> DER Set<br> ObjectIdentifier(1.2.840.113549.1.7.1)<br>DER Sequence<br>
ObjectIdentifier(1.2.840.113549.1.9.15)<br> DER Set<br> DER Sequence<br> DER Sequence<br> ObjectIdentifier(1.2.840.113549.3.7)<br>DER Sequence<br> ObjectIdentifier(1.2.840.113549.1.9.16.2.11)<br>
DER Set<br> Tagged [0] IMPLICIT<br> DER Sequence<br> DER Sequence<br> DER Set<br> DER Sequence<br> ObjectIdentifier(1.2.840.113549.1.9.1)<br>
IA5String(<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20696502&i=2" target="_top" rel="nofollow">info@...</a>)<br> DER Set<br> DER Sequence<br> ObjectIdentifier(<a href="http://2.5.4.3/" target="_blank" rel="nofollow">2.5.4.3</a>)<br>
PrintableString(DigiNotar Public CA)<br> DER Set<br> DER Sequence<br> ObjectIdentifier(<a href="http://2.5.4.10/" target="_blank" rel="nofollow">2.5.4.10</a>)<br>
PrintableString(DigiNotar)<br> DER Set<br> DER Sequence<br> ObjectIdentifier(<a href="http://2.5.4.6/" target="_blank" rel="nofollow">2.5.4.6</a>)<br>
PrintableString(NL)<br> Integer(1102949502)<br>DER Sequence<br> ObjectIdentifier(1.2.840.113549.1.9.5)<br> DER Set<br> UTCTime(081027091931GMT+00:00)<br><br>Unsigned attributes:<br>
<br><br><br>SMIME capabilities<br><br>3DES<br><br>Verification OK.<br>==============================<br>Certificates:<br><br>*** Certificate 0<br><br> [0] Version: 3<br> SerialNumber: 1102949502<br> IssuerDN: C=NL,O=DigiNotar,CN=DigiNotar Public<br>
CA,E=<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20696502&i=3" target="_top" rel="nofollow">info@...</a><br> Start Date: Mon Dec 13 14:51:42 GMT 2004<br> Final Date: Fri Dec 12 14:51:42 GMT 2008<br> SubjectDN: C=NL,O=Pantheon Automatisering B.V.<br>
(0001055135),L=Heerenveen Burgemeester Falkenaweg 58-2<br>(0000),OU=Envelopcertificaat DS - zie CPS,OU=(0412130028),CN=Pantheon<br>Automatisering B.V. (0412130028)<br> Public Key: RSA Public Key<br> modulus:<br>
c42b530bd273a00271c93797a3536244a031c3af6ea014c70051ab579488917bf349321fc9b29e481ff269159af36f9eee0cc2d992299a1e7c74e44a1ea1ee5954fa45365b6a0830c81540a4aa460018e6654bcf25df8874cab3db207e55ed4640c9a465daee6bb54ef99f19c2f2a6f3b208317f9ce7fa7f375e010a14355113<br>
public exponent: 10001<br><br> Signature Algorithm: SHA1WithRSAEncryption<br> Signature: 3b4769e53a1b6ab2eae0e0589bca29d08d1e4cae<br> be172474c13b75406e0247fd8f5d8322225e8859<br> 310c801de999b73496b5eb27fc8de749950c6b41<br>
f1c80b477422bac105d479fb66bf5c32f307beac<br> ff88fea4714fe455c2f9274eb190672438ac24b5<br> bf4f74a1db989ef06c6368c6328507028d681653<br> f865f690c3861eeb99b3bd2c7f2ea5bdefe08ddf<br>
e3c6f6ae646586050714898d753815a5959740b0<br> 2a8c050dd5b9e045d379eac15340429c8f053326<br> 1b6c4a8e46cc2935a0b526c97ef5155cfd923dac<br> d4b5193dd8e2906fa0852fdb4c006d76aff4aace<br>
deef9ef6f33548e63b8d0b8b3c4760dfe5a7934f<br> e2950db6ea3f9012db666dce9895ff1a<br> Extensions:<br> critical(true) KeyUsage: 0x80<br> critical(false) <a href="http://2.5.29.37/" target="_blank" rel="nofollow">2.5.29.37</a> value = DER Sequence<br>
ObjectIdentifier(1.3.6.1.5.5.7.3.2)<br> ObjectIdentifier(1.3.6.1.5.5.7.3.4)<br> ObjectIdentifier(1.3.6.1.5.5.7.3.7)<br> ObjectIdentifier(1.3.6.1.4.1.311.10.3.4)<br><br> critical(false) <a href="http://2.5.29.32/" target="_blank" rel="nofollow">2.5.29.32</a> value = DER Sequence<br>
DER Sequence<br> ObjectIdentifier(2.16.528.1.1001.1.1.1.4.4)<br> DER Sequence<br> DER Sequence<br> ObjectIdentifier(1.3.6.1.5.5.7.2.2)<br> DER Sequence<br> VisibleString(Conditions, as mentioned on our<br>
<div class="Ih2E3d">website (<a href="http://www.diginotar.nl/" target="_blank" rel="nofollow">www.diginotar.nl</a>), are applicable to all our products and<br></div>services.)<br><br> critical(false) 1.3.6.1.5.5.7.1.1 value = DER<br>
Sequence<br> DER Sequence<br> ObjectIdentifier(1.3.6.1.5.5.7.48.1)<br> Tagged [6] IMPLICIT<br> DER Octet String[30]<br><br> critical(false) <a href="http://2.5.29.35/" target="_blank" rel="nofollow">2.5.29.35</a> value = DER Sequence<br>
Tagged [0] IMPLICIT<br> DER Octet String[8]<br><br> critical(false) <a href="http://2.5.29.14/" target="_blank" rel="nofollow">2.5.29.14</a> value = DER Octet<br>String[8]<br><br><br><br>Extra information:<br>
<br>SubjectKeyIdentifier: 40906239EE5D3650<br>Email: []<br><br>==============================<br>CRLs:<br><br>*** Unsigned message:<br><br>Content-Type: application/pkcs10; name=E-20081027101922591.p10<br>Content-Transfer-Encoding: base64<br>
Content-Disposition: attachment; filename="E-20081027101922591.p10"<br><br>MIICUTCCAboCAQAwge8xCzAJBgNVBAYTAk5MMTIwMAYDVQQKEylQYW50aGVvbiBBdXRvbWF0aXNl<br>cmluZyBCLlYuICgwMDAxMDU1MTM1KTE3MDUGA1UEBxMuSGVlcmVudmVlbiBCdXJnZW1lZXN0ZXIg<br>
RmFsa2VuYXdlZyA1OC0yICgwMDAwKTEoMCYGA1UECxMfRW52ZWxvcGNlcnRpZmljYWF0IERTIC0g<br>emllIENQUzEVMBMGA1UECxMMKDA0MTIxMzAwMjgpMTIwMAYDVQQDEylQYW50aGVvbiBBdXRvbWF0<br>aXNlcmluZyBCLlYuICgwNDEyMTMwMDI4KTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxCtT<br>
C9JzoAJxyTeXo1NiRKAxw69uoBTHAFGrV5SIkXvzSTIfybKeSB/yaRWa82<br>+e7gzC2ZIpmh58dORK<br>HqHuWVT6RTZbaggwyBVApKpGABjmZUvPJd+IdMqz2yB+Ve1GQMmkZdrua7VO<br>+Z8ZwvKm87IIMX+c<br>5/p/N14BChQ1URMCAwEAAaAhMB8GCSqGSIb3DQEJDjESMBAwDgYDVR0PAQH/BAQDAgeAMA0GCSqG<br>
SIb3DQEBBQUAA4GBAEfjf4SJyRwnpk0TkaDP4+HjPhUA4bes8m0i3p6poVL4SqsbQ97I<br>+U5FRyVa<br>l2Zj4BoSbax0hMAoKbqbK9paBaVUpftpyVdzksRB9bi2jQSyZ3epZ7rpkK0WHgX45k6C6eDRnWyd<br>
<div>
<div></div>
<div class="Wj3C7c"><br><br>On Tue, 2008-11-25 at 17:39 +0100, Corné A wrote:<br>> Date: Mon, 27 Oct 2008 10:19:32 +0100 (CET)<br>> From: <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20696502&i=4" target="_top" rel="nofollow">certificaat@...</a><br>> To: <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20696502&i=5" target="_top" rel="nofollow">aanvraag@...</a><br>
> Subject: [VERL] [Pantheon Automatisering B.V. (0412130028)] [A.R.<br>> Bakker]<br>> [0513-657357] [<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20696502&i=6" target="_top" rel="nofollow">a.bakker@...</a>]<br>> MIME-Version: 1.0<br>
> Content-Type: multipart/mixed;<br>> boundary="----=_Part_0_1334408815.1225099171956"<br>> ------=_Part_0_1334408815.1225099171956<br>> Content-Type: text/plain; charset=US-ASCII<br>> Content-Transfer-Encoding: 7bit<br>
> ------=_Part_0_1334408815.1225099171956<br>> Content-Type: application/pkcs7-mime; smime-type=signed-data;<br>> name="E-20081027101922591.p7m"<br>> Content-Transfer-Encoding: base64<br>> Content-Disposition: attachment; filename="E-20081027101922591.p7m"<br>
> MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAaCAJIAEggPaQ29u<br>> dGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wa2NzMTA7IG5hbWU9RS0yMDA4MTAyNzEwMTkyMjU5MS5w<br>> MTANCkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IGJhc2U2NA0KQ29udGVudC1EaXNwb3NpdGlv<br>
> bjogYXR0YWNobWVudDsgZmlsZW5hbWU9IkUtMjAwODEwMjcxMDE5MjI1OTEucDEwIg0KDQpNSUlD<br>> VVRDQ0Fib0NBUUF3Z2U4eEN6QUpCZ05WQkFZVEFrNU1NVEl3TUFZRFZRUUtFeWxRWVc1MGFHVnZi<br>> aUJCZFhSdmJXRjBhWE5sDQpjbWx1WnlCQ0xsWXVJQ2d3TURBeE1EVTFNVE0xS1RFM01EVUdBMVVF<br>
> QnhNdVNHVmxjbVZ1ZG1WbGJpQkNkWEpuWlcxbFpYTjBaWElnDQpSbUZzYTJWdVlYZGxaeUExT0Mw<br>> eUlDZ3dNREF3S1RFb01DWUdBMVVFQ3hNZlJXNTJaV3h2Y0dObGNuUnBabWxqWVdGMElFUlRJQzBn<br>> DQplbWxsSUVOUVV6RVZNQk1HQTFVRUN4TU1LREEwTVRJeE16QXdNamdwTVRJd01BWURWUVFERXls<br>
> UVlXNTBhR1Z2YmlCQmRYUnZiV0YwDQphWE5sY21sdVp5QkNMbFl1SUNnd05ERXlNVE13TURJNEtU<br>> Q0JuekFOQmdrcWhraUc5dzBCQVFFRkFBT0JqUUF3Z1lrQ2dZRUF4Q3RUDQpDOUp6b0FKeHlUZVhv<br>> MU5pUktBeHc2OXVvQlRIQUZHclY1U0lrWHZ6U1RJZnliS2VTQi95YVJXYTgyK2U3Z3pDMlpJcG1o<br>
> NThkT1JLDQpIcUh1V1ZUNlJUWmJhZ2d3eUJWQXBLcEdBQmptWlV2UEpkK0lkTXF6MnlCK1ZlMUdR<br>> TW1rWmRydWE3Vk8rWjhad3ZLbTg3SUlNWCtjDQo1L3AvTjE0QkNoUTFVUk1DQXdFQUFhQWhNQjhH<br>> Q1NxR1NJYjNEUUVKRGpFU01CQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1BMEdDU3FHDQpTSWIzRFFF<br>
> QkJRVUFBNEdCQUVmamY0U0p5UnducGswVGthRFA0K0hqUGhVQTRiZXM4bTBpM3A2cG9WTDRTcXNi<br>> UTk3SStVNUZSeVZhDQpsMlpqNEJvU2JheDBoTUFvS2JxYks5cGFCYVZVcGZ0cHlWZHprc1JCOWJp<br>> MmpRU3laM2VwWjdycGtLMFdIZ1g0NWs2QzZlRFJuV3lkDQpnMGlyRXlJR0ZvdC90d1k2dEE2eWVW<br>
> aFZ6aUJudFhxVmV1M3QAAAAAAACgggSaMIIEljCCA36gAwIBAgIEQb2sfjANBgkqhkiG9w0BAQUF<br>> ADBhMQswCQYDVQQGEwJOTDESMBAGA1UEChMJRGlnaU5vdGFyMRwwGgYDVQQDExNEaWdpTm90YXIg<br>> UHVibGljIENBMSAwHgYJKoZIhvcNAQkBFhFpbmZvQGRpZ2lub3Rhci5ubDAeFw0wNDEyMTMxNDUx<br>
> NDJaFw0wODEyMTIxNDUxNDJaMIHvMQswCQYDVQQGEwJOTDEyMDAGA1UEChMpUGFudGhlb24gQXV0<br>> b21hdGlzZXJpbmcgQi5WLiAoMDAwMTA1NTEzNSkxNzA1BgNVBAcTLkhlZXJlbnZlZW4gQnVyZ2Vt<br>> ZWVzdGVyIEZhbGtlbmF3ZWcgNTgtMiAoMDAwMCkxKDAmBgNVBAsTH0VudmVsb3BjZXJ0aWZpY2Fh<br>
> dCBEUyAtIHppZSBDUFMxFTATBgNVBAsTDCgwNDEyMTMwMDI4KTEyMDAGA1UEAxMpUGFudGhlb24g<br>> QXV0b21hdGlzZXJpbmcgQi5WLiAoMDQxMjEzMDAyOCkwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ<br>> AoGBAMQrUwvSc6ACcck3l6NTYkSgMcOvbqAUxwBRq1eUiJF780kyH8mynkgf8mkVmvNvnu4MwtmS<br>
> KZoefHTkSh6h7llU<br>> +kU2W2oIMMgVQKSqRgAY5mVLzyXfiHTKs9sgflXtRkDJpGXa7mu1TvmfGcLy<br>> pvOyCDF/nOf6fzdeAQoUNVETAgMBAAGjggFJMIIBRTAOBgNVHQ8BAf8EBAMCB4AwMwYDVR0lBCww<br>> KgYIKwYBBQUHAwIGCCsGAQUFBwMEBggrBgEFBQcDBwYKKwYBBAGCNwoDBDCBmQYDVR0gBIGRMIGO<br>
> MIGLBgtghBABh2kBAQEEBDB8MHoGCCsGAQUFBwICMG4abENvbmRpdGlvbnMsIGFzIG1lbnRpb25l<br>> ZCBvbiBvdXIgd2Vic2l0ZSAod3d3LmRpZ2lub3Rhci5ubCksIGFyZSBhcHBsaWNhYmxlIHRvIGFs<br>> bCBvdXIgcHJvZHVjdHMgYW5kIHNlcnZpY2VzLjA6BggrBgEFBQcBAQQuMCwwKgYIKwYBBQUHMAGG<br>
> Hmh0dHA6Ly92YWxpZGF0aW9uLmRpZ2lub3Rhci5ubDATBgNVHSMEDDAKgAhI3ACCaGMkoDARBgNV<br>> HQ4ECgQIQJBiOe5dNlAwDQYJKoZIhvcNAQEFBQADggEBADtHaeU6G2qy6uDgWJvKKdCNHkyuvhck<br>> dME7dUBuAkf9j12DIiJeiFkxDIAd6Zm3NJa16yf8jedJlQxrQfHIC0d0IrrBBdR5<br>
> +2a/XDLzB76s<br>> /4j+pHFP5FXC<br>> +SdOsZBnJDisJLW/T3Sh25ie8GxjaMYyhQcCjWgWU/hl9pDDhh7rmbO9LH8upb3v<br>> 4I3f48b2rmRlhgUHFImNdTgVpZWXQLAqjAUN1bngRdN56sFTQEKcjwUzJhtsSo5GzCk1oLUmyX71<br>> FVz9kj2s1LUZPdjikG+ghS/bTABtdq/0qs7e75728zVI5juNC4s8R2Df5aeTT<br>
> +KVDbbqP5AS22Zt<br>> zpiV/xoxggIIMIICBAIBATBpMGExCzAJBgNVBAYTAk5MMRIwEAYDVQQKEwlEaWdpTm90YXIxHDAa<br>> BgNVBAMTE0RpZ2lOb3RhciBQdWJsaWMgQ0ExIDAeBgkqhkiG9w0BCQEWEWluZm9AZGlnaW5vdGFy<br>> Lm5sAgRBvax<br>> +MAkGBSsOAwIaBQCggfYwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAbBgkqhkiG<br>
> 9w0BCQ8xDjAMMAoGCCqGSIb3DQMHMBwGCSqGSIb3DQEJBTEPFw0wODEwMjcwOTE5MzFaMCMGCSqG<br>> SIb3DQEJBDEWBBQjJ3GRPSOrzvJcDqwB6vVYD7YStTB6BgsqhkiG9w0BCRACCzFroGkwYTEgMB4G<br>> CSqGSIb3DQEJARYRaW5mb0BkaWdpbm90YXIubmwxHDAaBgNVBAMTE0RpZ2lOb3RhciBQdWJsaWMg<br>
> Q0ExEjAQBgNVBAoTCURpZ2lOb3RhcjELMAkGA1UEBhMCTkwCBEG9rH4wDQYJKoZIhvcNAQEBBQAE<br>> gYCr5dff3+JALL2N0zrbkVGumi3EvdsBrj94AJIzTEOwdbq5UBX6OqBC5ZXsM4jWwE<br>> +KUL9Ncalh<br>> HNrygQ27cq2B9XS4NAtqlaGiQ7UdTWmEuji100jGrdKKrL6R9lTMd3Gr4kf30OU9RXsx<br>
> +KcumL3r<br>> +j5Kos4DNO/0/4dDKD2ULAAAAAAAAA==<br>> ------=_Part_0_1334408815.1225099171956--<br>><br><br></div></div></blockquote></div><br>
<p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20694044RE: Encryption Size2008-11-25T19:17:00Z2008-11-25T19:17:00ZDavid Hook-2<br>Yes that would impact the size. It's pretty much a waste of time trying
<br>to compress encrypted data though - if you can compress before
<br>encrypting.
<br><br>Regards,
<br><br>David
<br><br>On Tue, 2008-11-25 at 10:37 -0500, Mark Lookabaugh wrote:
<div class='shrinkable-quote'><br>> Here is the code in question. Any idea why this might generate a
<br>> different output size each time?
<br>>
<br>> In this case it's being called with useBase64Encoding = false;
<br>> SignatureVersion.PGP_SIGNATURE_VERSION_3;
<br>> PGPEncryptedDataGenerator.TRIPLE_DES (don't ask...); and
<br>> PGPCompressedData.ZIP.
<br>>
<br>> Could it be the ZIP compression? If the session key generated a
<br>> particular stream of bytes that compressed better than another, would
<br>> that impact the size?
<br>>
<br>> Thanks for any help,
<br>> Mark
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>> public void signAndEncryptFile(
<br>> final OutputStream outputStream,
<br>> final String plaintextFilePath,
<br>> final InputStream[] encryptionKeys,
<br>> final boolean useBase64Encoding,
<br>> final boolean withIntegrityCheck,
<br>> final boolean includeRMGKey,
<br>> final InputStream signingKey,
<br>> final String passphrase,
<br>> final SignatureVersion signatureVersion,
<br>> final Integer encryptionCipher,
<br>> final Integer compressionAlgo)
<br>> throws Exception
<br>> {
<br>> final OutputStream out = useBase64Encoding ? new
<br>> ArmoredOutputStream(outputStream)
<br>> : outputStream;
<br>>
<br>> InputStream rmgKeyInputStream =
<br>> PGPUtils.class.getResourceAsStream(
<br>> RMG_DEFAULT_KEY);
<br>> PGPPublicKey rmgKey = readPublicKey(rmgKeyInputStream);
<br>> IOUtils.closeQuietly(rmgKeyInputStream);
<br>>
<br>> //Figure out the encryption cipher:
<br>> int cipher = PGPEncryptedData.CAST5;
<br>> if (encryptionCipher != null) {
<br>> logger.logINFO("Using specified encryption
<br>> cipher: " + encryptionCipher);
<br>> cipher = encryptionCipher;
<br>> }
<br>> else {
<br>> logger.logINFO("Using default encryption cipher
<br>> CAST5");
<br>> }
<br>>
<br>> //Figure out the compression algo
<br>> int compression = PGPCompressedData.ZLIB;
<br>> if (compressionAlgo != null) {
<br>> logger.logINFO("Using specified compression
<br>> algorithm: " + compressionAlgo);
<br>> compression = compressionAlgo;
<br>> }
<br>> else {
<br>> logger.logINFO("Using default compression
<br>> algorithm ZLIB");
<br>> }
<br>>
<br>> // Set signature version
<br>> boolean version3sig = false;
<br>> boolean version4sig = true;
<br>> if (signatureVersion != null) {
<br>> logger.logINFO("Using specified signature
<br>> version: " + signatureVersion);
<br>> if (signatureVersion ==
<br>> SignatureVersion.PGP_SIGNATURE_VERSION_3) {
<br>> version3sig = true;
<br>> version4sig = false;
<br>> }
<br>> else if (signatureVersion ==
<br>> SignatureVersion.PGP_SIGNATURE_VERSION_4) {
<br>> version3sig = false;
<br>> version4sig = true;
<br>> }
<br>> else {
<br>> throw new RuntimeException("Unhandled
<br>> signature type: " + signatureVersion);
<br>> }
<br>> }
<br>> else {
<br>> logger.logINFO("Using default signature version
<br>> PGP_SIGNATURE_VERSION_4");
<br>> }
<br>>
<br>> PGPEncryptedDataGenerator cPk = new
<br>> PGPEncryptedDataGenerator(
<br>> cipher, withIntegrityCheck, new
<br>> SecureRandom(),
<br>> "BC");
<br>>
<br>> //Add encryption keys:
<br>> for (InputStream i : encryptionKeys) {
<br>> PGPPublicKey encKey = readPublicKey(i);
<br>> cPk.addMethod(encKey);
<br>> }
<br>>
<br>> if (includeRMGKey) {
<br>> cPk.addMethod(rmgKey);
<br>> }
<br>>
<br>> OutputStream cOut = cPk.open(out, new byte[1 << 16]);
<br>>
<br>> PGPSecretKey pgpSec = readSecretKey(signingKey);
<br>> PGPPrivateKey pgpPrivKey =
<br>> pgpSec.extractPrivateKey(passphrase.toCharArray(), "BC");
<br>>
<br>> PGPV3SignatureGenerator s3Gen = null;
<br>> PGPSignatureGenerator s4Gen = null;
<br>> if (version3sig) {
<br>> s3Gen = new
<br>> PGPV3SignatureGenerator(pgpSec.getPublicKey().getAlgorithm(),
<br>> PGPUtil.SHA1, "BC");
<br>> s3Gen.initSign(PGPSignature.BINARY_DOCUMENT,
<br>> pgpPrivKey);
<br>> }
<br>> else if (version4sig) {
<br>> s4Gen = new
<br>> PGPSignatureGenerator(pgpSec.getPublicKey().getAlgorithm(),
<br>> PGPUtil.SHA1, "BC");
<br>> s4Gen.initSign(PGPSignature.BINARY_DOCUMENT,
<br>> pgpPrivKey);
<br>> }
<br>>
<br>> Iterator it = pgpSec.getPublicKey().getUserIDs();
<br>> if (it.hasNext()) {
<br>> PGPSignatureSubpacketGenerator spGen = new
<br>> PGPSignatureSubpacketGenerator();
<br>> spGen.setSignerUserID(false, (String)
<br>> it.next());
<br>> if (version4sig) {
<br>> // Hashed Subpackets only apply to v4
<br>> signatures
<br>>
<br>> s4Gen.setHashedSubpackets(spGen.generate());
<br>> }
<br>> }
<br>>
<br>> PGPCompressedDataGenerator cGen = new
<br>> PGPCompressedDataGenerator(
<br>> compression);
<br>> BCPGOutputStream bOut = new
<br>> BCPGOutputStream(cGen.open(cOut));
<br>> if (version3sig) {
<br>>
<br>> s3Gen.generateOnePassVersion(false).encode(bOut);
<br>> }
<br>> else if (version4sig) {
<br>>
<br>> s4Gen.generateOnePassVersion(false).encode(bOut);
<br>> }
<br>>
<br>> File file = new File(plaintextFilePath);
<br>> PGPLiteralDataGenerator lGen = new
<br>> PGPLiteralDataGenerator();
<br>> OutputStream lOut = lGen.open(bOut,
<br>> PGPLiteralData.BINARY, file
<br>> .getName(), new Date(), new byte[1 <<
<br>> 16]);
<br>> // use of buffering to speed up write
<br>> byte[] buffer = new byte[1 << 16];
<br>> FileInputStream fIn = new FileInputStream(file);
<br>>
<br>> int bytesRead = 0;
<br>> while ((bytesRead = fIn.read(buffer)) != -1) {
<br>> lOut.write(buffer, 0, bytesRead);
<br>> if (version3sig) {
<br>> s3Gen.update(buffer, 0, bytesRead);
<br>> }
<br>> else if (version4sig) {
<br>> s4Gen.update(buffer, 0, bytesRead);
<br>> }
<br>>
<br>> lOut.flush();
<br>> }
<br>> lGen.close();
<br>> if (version3sig) {
<br>> s3Gen.generate().encode(bOut);
<br>> }
<br>> else if (version4sig) {
<br>> s4Gen.generate().encode(bOut);
<br>> }
<br>> cGen.close();
<br>>
<br>> cOut.close();
<br>> out.close();
<br>> }
<br>>
<br>>
<br>> -----Original Message-----
<br>> From: David Hook [mailto:<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20694044&i=0" target="_top" rel="nofollow">dgh@...</a>]
<br>> Sent: Monday, November 24, 2008 4:34 PM
<br>> To: <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20694044&i=1" target="_top" rel="nofollow">dev-crypto@...</a>
<br>> Subject: Re: [dev-crypto] Encryption Size
<br>>
<br>>
<br>> Not sure - it's probably not the session key, but it's not unusual to
<br>> see minor variations in size. There's not really enough info here for me
<br>> to say any more.
<br>>
<br>> Regards,
<br>>
<br>> David
<br>>
<br>> On Mon, 2008-11-24 at 10:16 -0500, Mark Lookabaugh wrote:
<br>> > Hi all,
<br>> >
<br>> > We're encrypting and signing data with a v3 signature using binary
<br>> > output (no ascii armoring), and have noticed that the resulting
<br>> > encrypted file size varies slightly each time the encryption is run.
<br>> > I would have expected that the file size would have been consistent.
<br>> > Is this due to the session key that's used each time?
<br>> >
<br>> > What is the reason for the difference in file size?
<br>> >
<br>> > Thank you!
<br>> > Mark
<br>> >
<br>> > --
<br>> > Mark Lookabaugh
<br>> > <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20694044&i=2" target="_top" rel="nofollow">mark.lookabaugh@...</a>
<br>> > Software Engineer
<br>> > RiskMetrics Group
<br>> >
<br>> >
<br>>
<br>>
<br>>
</div><br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20685707Re: Please verify Smime2008-11-25T09:17:59Z2008-11-25T09:17:59ZMartijn Brinkers (List)-2The base64 encoded blob contains a opaque s/mime signed message with a
<br>application/pkcs10 attachment. The details of the message are shown
<br>below.
<br><br><br>Regards,
<br><br>Martijn Brinkers
<br><br><br>*** details of signed message ***
<br><br>Signed message
<br><br>CMSVersion: 1
<br><br>*** [Signer 0] ***
<br><br>CMS Version: 1
<br><br>*** [SignerId] ***
<br>Issuer: <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20685707&i=0" target="_top" rel="nofollow">EMAILADDRESS=info@...</a>, CN=DigiNotar Public CA,
<br>O=DigiNotar, C=NL
<br>Serial number: 41BDAC7E
<br>SubjectKeyIdentifier: null
<br><br>Digest: SHA-1
<br>Encryption alg. OID: 1.2.840.113549.1.1.1
<br>Signing time: Mon Oct 27 09:19:31 GMT 2008
<br><br>Signed attributes:
<br>DER Sequence
<br> ObjectIdentifier(1.2.840.113549.1.9.4)
<br> DER Set
<br> DER Octet String[20]
<br>DER Sequence
<br> ObjectIdentifier(1.2.840.113549.1.9.3)
<br> DER Set
<br> ObjectIdentifier(1.2.840.113549.1.7.1)
<br>DER Sequence
<br> ObjectIdentifier(1.2.840.113549.1.9.15)
<br> DER Set
<br> DER Sequence
<br> DER Sequence
<br> ObjectIdentifier(1.2.840.113549.3.7)
<br>DER Sequence
<br> ObjectIdentifier(1.2.840.113549.1.9.16.2.11)
<br> DER Set
<br> Tagged [0] IMPLICIT
<br> DER Sequence
<br> DER Sequence
<br> DER Set
<br> DER Sequence
<br> ObjectIdentifier(1.2.840.113549.1.9.1)
<br> IA5String(<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20685707&i=1" target="_top" rel="nofollow">info@...</a>)
<br> DER Set
<br> DER Sequence
<br> ObjectIdentifier(2.5.4.3)
<br> PrintableString(DigiNotar Public CA)
<br> DER Set
<br> DER Sequence
<br> ObjectIdentifier(2.5.4.10)
<br> PrintableString(DigiNotar)
<br> DER Set
<br> DER Sequence
<br> ObjectIdentifier(2.5.4.6)
<br> PrintableString(NL)
<br> Integer(1102949502)
<br>DER Sequence
<br> ObjectIdentifier(1.2.840.113549.1.9.5)
<br> DER Set
<br> UTCTime(081027091931GMT+00:00)
<br><br>Unsigned attributes:
<br><br><br><br>SMIME capabilities
<br><br>3DES
<br><br>Verification OK.
<br>==============================
<br>Certificates:
<br><br>*** Certificate 0
<br><br> [0] Version: 3
<br> SerialNumber: 1102949502
<br> IssuerDN: C=NL,O=DigiNotar,CN=DigiNotar Public
<br>CA,<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20685707&i=2" target="_top" rel="nofollow">E=info@...</a>
<br> Start Date: Mon Dec 13 14:51:42 GMT 2004
<br> Final Date: Fri Dec 12 14:51:42 GMT 2008
<br> SubjectDN: C=NL,O=Pantheon Automatisering B.V.
<br>(0001055135),L=Heerenveen Burgemeester Falkenaweg 58-2
<br>(0000),OU=Envelopcertificaat DS - zie CPS,OU=(0412130028),CN=Pantheon
<br>Automatisering B.V. (0412130028)
<br> Public Key: RSA Public Key
<br> modulus:
<br>c42b530bd273a00271c93797a3536244a031c3af6ea014c70051ab579488917bf349321fc9b29e481ff269159af36f9eee0cc2d992299a1e7c74e44a1ea1ee5954fa45365b6a0830c81540a4aa460018e6654bcf25df8874cab3db207e55ed4640c9a465daee6bb54ef99f19c2f2a6f3b208317f9ce7fa7f375e010a14355113
<br> public exponent: 10001
<br><br> Signature Algorithm: SHA1WithRSAEncryption
<br> Signature: 3b4769e53a1b6ab2eae0e0589bca29d08d1e4cae
<br> be172474c13b75406e0247fd8f5d8322225e8859
<br> 310c801de999b73496b5eb27fc8de749950c6b41
<br> f1c80b477422bac105d479fb66bf5c32f307beac
<br> ff88fea4714fe455c2f9274eb190672438ac24b5
<br> bf4f74a1db989ef06c6368c6328507028d681653
<br> f865f690c3861eeb99b3bd2c7f2ea5bdefe08ddf
<br> e3c6f6ae646586050714898d753815a5959740b0
<br> 2a8c050dd5b9e045d379eac15340429c8f053326
<br> 1b6c4a8e46cc2935a0b526c97ef5155cfd923dac
<br> d4b5193dd8e2906fa0852fdb4c006d76aff4aace
<br> deef9ef6f33548e63b8d0b8b3c4760dfe5a7934f
<br> e2950db6ea3f9012db666dce9895ff1a
<br> Extensions:
<br> critical(true) KeyUsage: 0x80
<br> critical(false) 2.5.29.37 value = DER Sequence
<br> ObjectIdentifier(1.3.6.1.5.5.7.3.2)
<br> ObjectIdentifier(1.3.6.1.5.5.7.3.4)
<br> ObjectIdentifier(1.3.6.1.5.5.7.3.7)
<br> ObjectIdentifier(1.3.6.1.4.1.311.10.3.4)
<br><br> critical(false) 2.5.29.32 value = DER Sequence
<br> DER Sequence
<br> ObjectIdentifier(2.16.528.1.1001.1.1.1.4.4)
<br> DER Sequence
<br> DER Sequence
<br> ObjectIdentifier(1.3.6.1.5.5.7.2.2)
<br> DER Sequence
<br> VisibleString(Conditions, as mentioned on our
<br>website (www.diginotar.nl), are applicable to all our products and
<br>services.)
<br><br> critical(false) 1.3.6.1.5.5.7.1.1 value = DER
<br>Sequence
<br> DER Sequence
<br> ObjectIdentifier(1.3.6.1.5.5.7.48.1)
<br> Tagged [6] IMPLICIT
<br> DER Octet String[30]
<br><br> critical(false) 2.5.29.35 value = DER Sequence
<br> Tagged [0] IMPLICIT
<br> DER Octet String[8]
<br><br> critical(false) 2.5.29.14 value = DER Octet
<br>String[8]
<br><br><br><br>Extra information:
<br><br>SubjectKeyIdentifier: 40906239EE5D3650
<br>Email: []
<br><br>==============================
<br>CRLs:
<br><br>*** Unsigned message:
<br><br>Content-Type: application/pkcs10; name=E-20081027101922591.p10
<br>Content-Transfer-Encoding: base64
<br>Content-Disposition: attachment; filename="E-20081027101922591.p10"
<br><br>MIICUTCCAboCAQAwge8xCzAJBgNVBAYTAk5MMTIwMAYDVQQKEylQYW50aGVvbiBBdXRvbWF0aXNl
<br>cmluZyBCLlYuICgwMDAxMDU1MTM1KTE3MDUGA1UEBxMuSGVlcmVudmVlbiBCdXJnZW1lZXN0ZXIg
<br>RmFsa2VuYXdlZyA1OC0yICgwMDAwKTEoMCYGA1UECxMfRW52ZWxvcGNlcnRpZmljYWF0IERTIC0g
<br>emllIENQUzEVMBMGA1UECxMMKDA0MTIxMzAwMjgpMTIwMAYDVQQDEylQYW50aGVvbiBBdXRvbWF0
<br>aXNlcmluZyBCLlYuICgwNDEyMTMwMDI4KTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxCtT
<br>C9JzoAJxyTeXo1NiRKAxw69uoBTHAFGrV5SIkXvzSTIfybKeSB/yaRWa82
<br>+e7gzC2ZIpmh58dORK
<br>HqHuWVT6RTZbaggwyBVApKpGABjmZUvPJd+IdMqz2yB+Ve1GQMmkZdrua7VO
<br>+Z8ZwvKm87IIMX+c
<br>5/p/N14BChQ1URMCAwEAAaAhMB8GCSqGSIb3DQEJDjESMBAwDgYDVR0PAQH/BAQDAgeAMA0GCSqG
<br>SIb3DQEBBQUAA4GBAEfjf4SJyRwnpk0TkaDP4+HjPhUA4bes8m0i3p6poVL4SqsbQ97I
<br>+U5FRyVa
<br>l2Zj4BoSbax0hMAoKbqbK9paBaVUpftpyVdzksRB9bi2jQSyZ3epZ7rpkK0WHgX45k6C6eDRnWyd
<br><br><br>On Tue, 2008-11-25 at 17:39 +0100, Corné A wrote:
<div class='shrinkable-quote'><br>> Date: Mon, 27 Oct 2008 10:19:32 +0100 (CET)
<br>> From: <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20685707&i=3" target="_top" rel="nofollow">certificaat@...</a>
<br>> To: <a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20685707&i=4" target="_top" rel="nofollow">aanvraag@...</a>
<br>> Subject: [VERL] [Pantheon Automatisering B.V. (0412130028)] [A.R.
<br>> Bakker]
<br>> [0513-657357] [<a href="http://www.nabble.com/user/SendEmail.jtp?type=post&post=20685707&i=5" target="_top" rel="nofollow">a.bakker@...</a>]
<br>> MIME-Version: 1.0
<br>> Content-Type: multipart/mixed;
<br>> boundary="----=_Part_0_1334408815.1225099171956"
<br>> ------=_Part_0_1334408815.1225099171956
<br>> Content-Type: text/plain; charset=US-ASCII
<br>> Content-Transfer-Encoding: 7bit
<br>> ------=_Part_0_1334408815.1225099171956
<br>> Content-Type: application/pkcs7-mime; smime-type=signed-data;
<br>> name="E-20081027101922591.p7m"
<br>> Content-Transfer-Encoding: base64
<br>> Content-Disposition: attachment; filename="E-20081027101922591.p7m"
<br>> MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAaCAJIAEggPaQ29u
<br>> dGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wa2NzMTA7IG5hbWU9RS0yMDA4MTAyNzEwMTkyMjU5MS5w
<br>> MTANCkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IGJhc2U2NA0KQ29udGVudC1EaXNwb3NpdGlv
<br>> bjogYXR0YWNobWVudDsgZmlsZW5hbWU9IkUtMjAwODEwMjcxMDE5MjI1OTEucDEwIg0KDQpNSUlD
<br>> VVRDQ0Fib0NBUUF3Z2U4eEN6QUpCZ05WQkFZVEFrNU1NVEl3TUFZRFZRUUtFeWxRWVc1MGFHVnZi
<br>> aUJCZFhSdmJXRjBhWE5sDQpjbWx1WnlCQ0xsWXVJQ2d3TURBeE1EVTFNVE0xS1RFM01EVUdBMVVF
<br>> QnhNdVNHVmxjbVZ1ZG1WbGJpQkNkWEpuWlcxbFpYTjBaWElnDQpSbUZzYTJWdVlYZGxaeUExT0Mw
<br>> eUlDZ3dNREF3S1RFb01DWUdBMVVFQ3hNZlJXNTJaV3h2Y0dObGNuUnBabWxqWVdGMElFUlRJQzBn
<br>> DQplbWxsSUVOUVV6RVZNQk1HQTFVRUN4TU1LREEwTVRJeE16QXdNamdwTVRJd01BWURWUVFERXls
<br>> UVlXNTBhR1Z2YmlCQmRYUnZiV0YwDQphWE5sY21sdVp5QkNMbFl1SUNnd05ERXlNVE13TURJNEtU
<br>> Q0JuekFOQmdrcWhraUc5dzBCQVFFRkFBT0JqUUF3Z1lrQ2dZRUF4Q3RUDQpDOUp6b0FKeHlUZVhv
<br>> MU5pUktBeHc2OXVvQlRIQUZHclY1U0lrWHZ6U1RJZnliS2VTQi95YVJXYTgyK2U3Z3pDMlpJcG1o
<br>> NThkT1JLDQpIcUh1V1ZUNlJUWmJhZ2d3eUJWQXBLcEdBQmptWlV2UEpkK0lkTXF6MnlCK1ZlMUdR
<br>> TW1rWmRydWE3Vk8rWjhad3ZLbTg3SUlNWCtjDQo1L3AvTjE0QkNoUTFVUk1DQXdFQUFhQWhNQjhH
<br>> Q1NxR1NJYjNEUUVKRGpFU01CQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1BMEdDU3FHDQpTSWIzRFFF
<br>> QkJRVUFBNEdCQUVmamY0U0p5UnducGswVGthRFA0K0hqUGhVQTRiZXM4bTBpM3A2cG9WTDRTcXNi
<br>> UTk3SStVNUZSeVZhDQpsMlpqNEJvU2JheDBoTUFvS2JxYks5cGFCYVZVcGZ0cHlWZHprc1JCOWJp
<br>> MmpRU3laM2VwWjdycGtLMFdIZ1g0NWs2QzZlRFJuV3lkDQpnMGlyRXlJR0ZvdC90d1k2dEE2eWVW
<br>> aFZ6aUJudFhxVmV1M3QAAAAAAACgggSaMIIEljCCA36gAwIBAgIEQb2sfjANBgkqhkiG9w0BAQUF
<br>> ADBhMQswCQYDVQQGEwJOTDESMBAGA1UEChMJRGlnaU5vdGFyMRwwGgYDVQQDExNEaWdpTm90YXIg
<br>> UHVibGljIENBMSAwHgYJKoZIhvcNAQkBFhFpbmZvQGRpZ2lub3Rhci5ubDAeFw0wNDEyMTMxNDUx
<br>> NDJaFw0wODEyMTIxNDUxNDJaMIHvMQswCQYDVQQGEwJOTDEyMDAGA1UEChMpUGFudGhlb24gQXV0
<br>> b21hdGlzZXJpbmcgQi5WLiAoMDAwMTA1NTEzNSkxNzA1BgNVBAcTLkhlZXJlbnZlZW4gQnVyZ2Vt
<br>> ZWVzdGVyIEZhbGtlbmF3ZWcgNTgtMiAoMDAwMCkxKDAmBgNVBAsTH0VudmVsb3BjZXJ0aWZpY2Fh
<br>> dCBEUyAtIHppZSBDUFMxFTATBgNVBAsTDCgwNDEyMTMwMDI4KTEyMDAGA1UEAxMpUGFudGhlb24g
<br>> QXV0b21hdGlzZXJpbmcgQi5WLiAoMDQxMjEzMDAyOCkwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ
<br>> AoGBAMQrUwvSc6ACcck3l6NTYkSgMcOvbqAUxwBRq1eUiJF780kyH8mynkgf8mkVmvNvnu4MwtmS
<br>> KZoefHTkSh6h7llU
<br>> +kU2W2oIMMgVQKSqRgAY5mVLzyXfiHTKs9sgflXtRkDJpGXa7mu1TvmfGcLy
<br>> pvOyCDF/nOf6fzdeAQoUNVETAgMBAAGjggFJMIIBRTAOBgNVHQ8BAf8EBAMCB4AwMwYDVR0lBCww
<br>> KgYIKwYBBQUHAwIGCCsGAQUFBwMEBggrBgEFBQcDBwYKKwYBBAGCNwoDBDCBmQYDVR0gBIGRMIGO
<br>> MIGLBgtghBABh2kBAQEEBDB8MHoGCCsGAQUFBwICMG4abENvbmRpdGlvbnMsIGFzIG1lbnRpb25l
<br>> ZCBvbiBvdXIgd2Vic2l0ZSAod3d3LmRpZ2lub3Rhci5ubCksIGFyZSBhcHBsaWNhYmxlIHRvIGFs
<br>> bCBvdXIgcHJvZHVjdHMgYW5kIHNlcnZpY2VzLjA6BggrBgEFBQcBAQQuMCwwKgYIKwYBBQUHMAGG
<br>> Hmh0dHA6Ly92YWxpZGF0aW9uLmRpZ2lub3Rhci5ubDATBgNVHSMEDDAKgAhI3ACCaGMkoDARBgNV
<br>> HQ4ECgQIQJBiOe5dNlAwDQYJKoZIhvcNAQEFBQADggEBADtHaeU6G2qy6uDgWJvKKdCNHkyuvhck
<br>> dME7dUBuAkf9j12DIiJeiFkxDIAd6Zm3NJa16yf8jedJlQxrQfHIC0d0IrrBBdR5
<br>> +2a/XDLzB76s
<br>> /4j+pHFP5FXC
<br>> +SdOsZBnJDisJLW/T3Sh25ie8GxjaMYyhQcCjWgWU/hl9pDDhh7rmbO9LH8upb3v
<br>> 4I3f48b2rmRlhgUHFImNdTgVpZWXQLAqjAUN1bngRdN56sFTQEKcjwUzJhtsSo5GzCk1oLUmyX71
<br>> FVz9kj2s1LUZPdjikG+ghS/bTABtdq/0qs7e75728zVI5juNC4s8R2Df5aeTT
<br>> +KVDbbqP5AS22Zt
<br>> zpiV/xoxggIIMIICBAIBATBpMGExCzAJBgNVBAYTAk5MMRIwEAYDVQQKEwlEaWdpTm90YXIxHDAa
<br>> BgNVBAMTE0RpZ2lOb3RhciBQdWJsaWMgQ0ExIDAeBgkqhkiG9w0BCQEWEWluZm9AZGlnaW5vdGFy
<br>> Lm5sAgRBvax
<br>> +MAkGBSsOAwIaBQCggfYwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAbBgkqhkiG
<br>> 9w0BCQ8xDjAMMAoGCCqGSIb3DQMHMBwGCSqGSIb3DQEJBTEPFw0wODEwMjcwOTE5MzFaMCMGCSqG
<br>> SIb3DQEJBDEWBBQjJ3GRPSOrzvJcDqwB6vVYD7YStTB6BgsqhkiG9w0BCRACCzFroGkwYTEgMB4G
<br>> CSqGSIb3DQEJARYRaW5mb0BkaWdpbm90YXIubmwxHDAaBgNVBAMTE0RpZ2lOb3RhciBQdWJsaWMg
<br>> Q0ExEjAQBgNVBAoTCURpZ2lOb3RhcjELMAkGA1UEBhMCTkwCBEG9rH4wDQYJKoZIhvcNAQEBBQAE
<br>> gYCr5dff3+JALL2N0zrbkVGumi3EvdsBrj94AJIzTEOwdbq5UBX6OqBC5ZXsM4jWwE
<br>> +KUL9Ncalh
<br>> HNrygQ27cq2B9XS4NAtqlaGiQ7UdTWmEuji100jGrdKKrL6R9lTMd3Gr4kf30OU9RXsx
<br>> +KcumL3r
<br>> +j5Kos4DNO/0/4dDKD2ULAAAAAAAAA==
<br>> ------=_Part_0_1334408815.1225099171956--
<br>>
</div><br><br><p>From forum: <a href="http://www.nabble.com/Bouncy-Castle---Dev-f945.html" embed="fixTarget[945]" target="_top" >Bouncy Castle - Dev</a></p>tag:www.nabble.com,2006:post-20685616[QUESTION] CMSSignedData to sign PDF from smartcard with BC, IAIK Wrapper, iText2008-11-25T09:14:12Z