Re: Open source Java encryption code

Mike Amling <nospam@nospam.com> writes:
> > Aside from the elliptic curve stuff, what does this library do that
> > JSSE doesn't?
>
> Forward secrecy?

I expect JSSE supports supplies that. From RFC 2246,

    9. Mandatory Cipher Suites

       In the absence of an application profile standard specifying
       otherwise, a TLS compliant application MUST implement the cipher
       suite TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA.

DHE stands for Diffie-Hellman-Ephemeral.

> At the time it was first written... I don't know if JSSE
> existed then. Another requirement was that it run on Java 1.1.7.

OK, that makes some sense, but these days I'd just use JSSE.
Received on Sat Oct 15 04:39:19 2005