


Hi all,What's better?1. zip the file and than encrypt it (AES)2. encrypt (AES) the file and than zip it3. doesn't matter.I am more concern in the file's integrity less on efficency.thanks for any thought.Peter...
What makes your book different from all the other web security books out there? Also, at 1088 pages this is probably a reference guide. Who is it written for? Thanks in advance for you response....
Hello all,Wondering if anyone can help me here:I've found a nice method to generate an MD hash digest:public static byte[] getKeyedDigest(byte[] buffer, byte[] key) { try { MessageDigest md5 = MessageDigest.getInstance("MD5"); md5.update(buffer); return md5.digest(key); } catch (NoSuchAlgori...
I am developing a B2B application which uses XML for Data interchange over the internet. I would like to know how to build in security in this application.Any pointers to start with, would be of great help.Thanks,Pradeep...
Hi,I am trying to do XML Encryption.I am using XSS4j API.I want to know how can I generate a symmetric Key to encrypt data.and how can I encrypt it with public Key.I wrote following code.and I received Encrypted Message also but I did not get Encrypted Key(As Cypher Value is empty)I know I can u...
Hi,In the current JSSE 1.0.3_03, only X509Certificate v1 implementation is supported? Does anyone know when v3 will be supported? Could be possibly be part of JDK1.5?ThanksVictor...
Hi,How do we perform the X509Certificate authentication in java? Say I have the sender certificate(which contains its public key), the singed data, and its signature. How do i verify this against the root trusted CA in cacerts to make sure that this certificate was actually given by a CA that we...
Hi,In JDK1.3.x, I am wondering if the JDK by default has implementations of X509Certificate? From my experience, I have used the iaik certificate implementations. Does JDK itself provide its own also?X509Certificate is an abstract class, what is the way to create a X509Certificate w/o any 3rd pa...
Hello,I am trying to create a new certificate for my tomcat server but I cannot import my key with keytool. I haven't been able to figure out what is causing it so I thought I'd see here if anyone recognizes my problem.I first create my private key usingkeytool -genkey -keyalg RSA -alias...
I have been struggling with implementing a client authorization with x509 certificates. I am able to get server side, SSL, but adding in the client side seems next to impossible. Does you book cover this aspect? We will be the CA for the client on a Win2k server. Specifically, I believe my issue...
HiI was trying to encrypt a message using XSS4j.I have certain issues.As for Encryption we are supposed to use Public Key of client to genrate and encrypt the symmetric key which will be used for final Enbcryption.I am trying to use the same but my doubt is how to create a symmetric key and how...
HiI want to write to the mapped drive in my web application. The shared folder is on another machine in the same domain. Do we need to deploy the application with was.policy file. If so how do we give permission to access the network driveThanks in advance....
Hi , My client program is behind a firewall(only port 80 can receive request from outside world).My server is configured for SSL(on port 443).So I can only send request from my client to my server (on port 443) and my client can only get response from server corresponding to that request.What if...
I have recently started writing Servlet code. I want to know, how to send data from a web page to a Servlet in an encrypted format? Here is the web page<form method='post' action='/servlet/UserLogin'><table><tr><td><b>ID</b></td><td>...
Can I write my own callback like NameCallback and PasswordCallback ?I need another callback to be passed in to the LoginModule where I require an extra piece of information for further processing, for example I need client ID to be passed in to the login module, can I create another callback cal...
