Hi Dan, Dan Polansky said: > Hello all, > > Recently, there has been an encryption problem, solved by replacing Triple > DES with DES. As this solution is not there for FreeMind 0.8.0, I have I think this is not fully correct: in the past FreeMind was using some default encryption, which was DES for Java < 6 and became 3DES with Java = 6. So correct statement would be that we went from default (implicitly DES) to explicitly DES.
> created a wiki page dedicated to encryption: > > http://freemind.sourceforge.net/wiki/index.php/Encryption I would link it from the FAQ. > > There I have described a possible solution - sticking to an older version > of > Java JRE. Yep. > > Questions. There is still some important information missing. Can someone > in > the know please answer the following questions? > > 1. Is the bug officially documented and acknowledged by Sun? If so, at > what web page? Don't know, could think that Sun doesn't see this as a bug, but as a feature. > 2. What exactly are the concerned operating systems? (Possibly > unneeded if the answer to 1. is known.) All: Linux tested by me, Windows reported by users, as not an OS specific feature, assuming it impacts MacOS as well. > 3. What exactly are the concerned versions of JRE? (Possibly unneeded > if the answer to 1. is known.) 1.4 and 1.5 work well, 6 is "broken" (for 0.8.0). > > Better SW solution. Also, I think a better software solution of the > problem > would be the following. When encrypting maps, always use DES. When > decrypting maps, try to use DES, and if it does not work, try to use > Triple DES. I tend to disagree: as per my explanation above, all maps should be encrypted with DES (FreeMind with Java 6 couldn't save an encrypted map). We might think to move to 3DES in the future, as DES is easily crackable with current technology, but that's obviously a post-0.9.0 discussion. :-) Eric -- Eric de France, d'Allemagne et de Navarre ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Freemind-developer mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/freemind-developer
