Re: [iText-questions] Security aspect of iText

2013-11-01 Thread iText mailing list
On 11/1/2013 8:51 AM, Bapuji Nakka wrote: > Can I do the certificate encryption of a document after signing it? Of course not, that would break the signature. -- Android is increasing in popularity, but the open developme

Re: [iText-questions] Security aspect of iText

2013-11-01 Thread Bapuji Nakka
Hi, Can I do the certificate encryption of a document after signing it? below, I tried to do both but signature has been applied but it opening the document anywhere whithout certificate installation. * Signature code:- *ExternalSignature es = new PrivateKeySignature(pk, "SHA-256", "BC");

Re: [iText-questions] Security aspect of iText

2013-10-21 Thread iText Info
Op 21/10/2013 13:50, Bapuji Nakka schreef: > How the user decrypt with his private key? without having any utility > to do this job? His private key will have to be known by his PDF Viewer. For instance: on Windows, one can register his private key on the OS level and Adobe Reader can use that

Re: [iText-questions] Security aspect of iText

2013-10-21 Thread Bapuji Nakka
Hi, I will encrypt with user's public key. I share the document to the user. How the user decrypt with his private key? without having any utility to do this job? presently what iam doing is *Encryption* stamper.setEncryption(USER_PASSWORD.getBytes(), OWNER_PASSWORD.getBytes(), ~(PdfWriter.A

Re: [iText-questions] Security aspect of iText

2013-10-21 Thread iText Info
Op 21/10/2013 13:09, Bapuji Nakka schreef: > Hi, > > How world can see the document. what was the problem in the code? > Please correct me if I am understanding it wrongly. Please show me in which line you ENCRYPT the document. Maybe I'm overlooking it. I see that you SIGN the document, this

Re: [iText-questions] Security aspect of iText

2013-10-21 Thread Bapuji Nakka
Hi, How world can see the document. what was the problem in the code? Please correct me if I am understanding it wrongly. If i encrypt the document with certificate(private key) then how user decrypt it? If i share public key, how user will decrypt it? Do i need to provide the utility/web

Re: [iText-questions] Security aspect of iText

2013-10-21 Thread iText Info
Is it possible you're confusing encryption with signing? Your initial question was about encryption, which means you want to secure a document so that it's protected against people who may not know the content of the document. Your code shows that you're signing a document, which means that you

Re: [iText-questions] Security aspect of iText

2013-10-21 Thread Bapuji Nakka
Hi, Thanks for your help. Iam using Security.addProvider(new BouncyCastleProvider()); KeyStore ks = KeyStore.getInstance("pkcs12", "BC"); ks.load(new FileInputStream(cert), certpass); String alias = (String)ks.aliases().nextElement(); PrivateKey pk = (Pr

Re: [iText-questions] Security aspect of iText

2013-10-20 Thread iText mailing list
On 10/21/2013 8:03 AM, Bapuji Nakka wrote: > I am using AES 256 bit encryption. Is this secure from bruit force attack? >Because i read in articles, above encryption can be cracked easlily > in the adobe 9. This question is wrong. It should read: "Is password encryption secure?" The answer is

[iText-questions] Security aspect of iText

2013-10-20 Thread Bapuji Nakka
Hi, I am using AES 256 bit encryption. Is this secure from bruit force attack? Because i read in articles, above encryption can be cracked easlily in the adobe 9. http://blogs.adobe.com/security/2008/12/acrobat_9_and_password_encrypt.html -- Regards, Bapuji.Nakka | Scientific Officer NIC