Re: [C++]

2004-03-04 Thread GRU Samuel
I don't trace the process for the moment (i don't have the time, i have an over bug in a other part of my code :-( ) but i do this and i had this result : - The first time i called "sign()" after i launched apache : ~1 s the first time and ~0.1 s after (in the same process) - After when i call

Re: [VOTE] Native JCE Proposal

2004-03-04 Thread Erwin van der Koogh
Also - the suggested names were : 1. Juice 2. Janice 3. Juice 'n Jin To start : Committers: [+1] Berin Lautenbach [+1] Axl Mattheus [+1] Erwin van der Koogh [] Karel Wouters non-Committers: [] Davanum Srinivas [] Scott Cantor [] Walter Hoehn [] Others?

Re: [VOTE] Native JCE Proposal

2004-03-04 Thread Davanum Srinivas
+1 to Proposal (non-binding) +1 to Janice (non-binding) --- Erwin van der Koogh <[EMAIL PROTECTED]> wrote: > >> Also - the suggested names were : > >> > >> > >> 1. Juice > >> 2. Janice > >> 3. Juice 'n Jin > >> > >> > >> To start : > >> > > Committers: > > [+1] Berin Lautenbach > [+1] Axl Mat

Re: [VOTE] Native JCE Proposal (fwd)

2004-03-04 Thread Erwin van der Koogh
Forgot some stuff.. Link to proposal: http://nagoya.apache.org/wiki/apachewiki.cgi?XMLProjectPages/OpenSSLJCEProp osal Also - the suggested names were : 1. Juice 2. Janice 3. Juice 'n Jin To start : Committers: [+1] Berin Lautenbach (Juice) [+1] Axl Mattheus (Juice) [+1] Erwin van der Koogh (

Re: Question on JCE 1.5 key wraps

2004-03-04 Thread Berin Lautenbach
Sean, test_five_content_aes128_cbc_kw_aes192 test_five_content_3des_cbc_kw_aes128 test_five_data_aes256_cbc_3des test_five_data_aes192_cbc_aes256 Basically any interop test where a symmetric key wrap is used. The wrap/unwrap tests work, which leads me to believe that I am calling using the wron

Re: Decryption issue.

2004-03-04 Thread Berin Lautenbach
Ahhh. I wonder if the cipher text is split accross multiple text nodes and for some reason we are not gathering it all. I will have a look-see. (CCing to security-dev for records) Cheers, Berin Sachin Tarnekar wrote: Hi Berin, Thanks for the response.. The problem turns out to be

Re: [VOTE] Native JCE Proposal (fwd)

2004-03-04 Thread Karel Wouters
> >> Also - the suggested names were : > >> > >> > >> 1. Juice > >> 2. Janice > >> 3. Juice 'n Jin > >> > >> > >> To start : > >> > > Committers: > > [+1] Berin Lautenbach (Juice) > [+1] Axl Mattheus (Juice) > [+1] Erwin van der Koogh (Janice) > [] Karel Wouters > +1 Juice sounds OK to me too

Re: Decryption issue.

2004-03-04 Thread Berin Lautenbach
Sachin, I have just checked a new version of XMLCipher into CVS - could you have a try? We were only grabbing the first node beneath , so if there were multiple nodes, or any comments, we wouldn't grab all the cipher text. That may be where you were running into problems. Cheers, Ber

Re: Fragment Signing question

2004-03-04 Thread Berin Lautenbach
John Francis wrote: sig.addDocument("#xpointer(//Header)"); Reviewing the archive I see that a) If I'm not using an ID attribute I don't seem to able to do this. Is this true even if I have a schema for the document? I don't believe we really have full xpointer in the library at the moment. Th

Re: Detached signature examples

2004-03-04 Thread Berin Lautenbach
David, I assume the signatures would be in separate files? There are some samples in cvs://cvs.apache.org/xml-security/src_samples/org/apache/xml/security/samples/CreateSignature.java including some detached references. Other samples in that directory might also be of use. Cheers, Ber

Re: Question on JCE 1.5 key wraps

2004-03-04 Thread Davanum Srinivas
Sean, Here's my run with JDK1.5 with BC commented out: http://nagoya.apache.org/~dims/xmlsec-junit/ -- dims --- Berin Lautenbach <[EMAIL PROTECTED]> wrote: > Sean, > > test_five_content_aes128_cbc_kw_aes192 > test_five_content_3des_cbc_kw_aes128 > test_five_data_aes256_cbc_3des > test_five_data

Re: [C++]

2004-03-04 Thread Berin Lautenbach
I don't like the sound of that. It sounds most strange. Let me know how you go! Cheers, Berin GRU Samuel wrote: I don't trace the process for the moment (i don't have the time, i have an over bug in a other part of my code :-( ) but i do this and i had this result : - The first time

Re: Question on JCE 1.5 key wraps

2004-03-04 Thread Berin Lautenbach
Hmm. Interesting - must have a look at the signature stuff. I am currently only trying encryption. Davanum Srinivas wrote: Sean, Here's my run with JDK1.5 with BC commented out: http://nagoya.apache.org/~dims/xmlsec-junit/ -- dims --- Berin Lautenbach <[EMAIL PROTECTED]> wrote: Sean, test_

Re: Question on JCE 1.5 key wraps

2004-03-04 Thread Berin Lautenbach
Just looked in more detail - you also need to install the strong crypto policy files. Cheers, Berin Davanum Srinivas wrote: Sean, Here's my run with JDK1.5 with BC commented out: http://nagoya.apache.org/~dims/xmlsec-junit/ -- dims --- Berin Lautenbach <[EMAIL PROTECTED]> wrote: Sean,

Re: [VOTE] Native JCE Proposal (fwd)

2004-03-04 Thread Axl Mattheus
Committers. Voting so far... Committers: [+1] Berin Lautenbach (Juice) [+1] Axl Mattheus (Juice) [+1] Erwin van der Koogh (Janice) [+1] Karel Wouters (Juice) non-Committers: [+1] Davanum Srinivas (Janice) [] Scott Cantor [] Walter Hoehn [] Others? Looks like it is go on proposal and go on J

Re: [VOTE] Native JCE Proposal

2004-03-04 Thread Walter Hoehn
+1 to Proposal +1 to Juice

DO NOT REPLY [Bug 27435] New: - Update IBM interop tests / Fix compile problem in JDK1.3

2004-03-04 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 27435] - Update IBM interop tests / Fix compile problem in JDK1.3

2004-03-04 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 27435] - Update IBM interop tests / Fix compile problem in JDK1.3

2004-03-04 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 27435] - Update IBM interop tests / Fix compile problem in JDK1.3

2004-03-04 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bu

Re: Question on JCE 1.5 key wraps

2004-03-04 Thread Davanum Srinivas
Sean, Berin, Done. Here's the updated JDK1.5 run after commenting out lib.jce from classpath.libraries. -- dims --- Berin Lautenbach <[EMAIL PROTECTED]> wrote: > Just looked in more detail - you also need to install the strong crypto > policy files. > > Cheers, > Berin > > Davanum Srin

What's the Difference

2004-03-04 Thread Vishal Mahajan
All, Can someone explain what's the difference between the following two ways of initializing the javax.crypto.Cipher class for encrypting a symmetric key: 1) Cipher.init(WRAP_MODE, RSAPublicKey) 2) Cipher.init(ENCRYPT_MODE, RSAPublicKey) I observe that XMLCipher.encryptKey() method always in

Re: What's the Difference

2004-03-04 Thread Davanum Srinivas
Vishal, As far as i can figure out...WRAP_MODE is used for keys, ENCRYPT_MODE is used for the data itself. -- dims --- Vishal Mahajan <[EMAIL PROTECTED]> wrote: > All, > > Can someone explain what's the difference between the following two ways > of initializing the javax.crypto.Cipher class

Re: What's the Difference

2004-03-04 Thread Axl Mattheus
Vishal, There are different mechanisms used to encrypt/decrypt clear text/cipher text to wrap/unwrap a key. If one wants to encrypt something, one initializes the XMLCipher (javax.crypto.Cipher) to be in ENCRYPT_MODE in order for it to perform the appropriate functionality. Alternatively if on

Re: What's the Difference

2004-03-04 Thread Vishal Mahajan
Axl Mattheus wrote: Vishal, There are different mechanisms used to encrypt/decrypt clear text/cipher text to wrap/unwrap a key. If one wants to encrypt something, one initializes the XMLCipher (javax.crypto.Cipher) to be in ENCRYPT_MODE in order for it to perform the appropriate functionality

Re: Question on JCE 1.5 key wraps

2004-03-04 Thread Sean Mullan
I'll look into these failures and get back to you. The signature algorithms definitely should all work - my guess is it is likely a config problem. Thanks, Sean Davanum Srinivas wrote: Sean, Berin, Done. Here's the updated JDK1.5 run after commenting out lib.jce from classpath.libraries. -- dims

Re: What's the Difference

2004-03-04 Thread Sean Mullan
Vishal Mahajan wrote: Axl Mattheus wrote: Vishal, There are different mechanisms used to encrypt/decrypt clear text/cipher text to wrap/unwrap a key. If one wants to encrypt something, one initializes the XMLCipher (javax.crypto.Cipher) to be in ENCRYPT_MODE in order for it to perform the appr

Re: [VOTE] Native JCE Proposal

2004-03-04 Thread Noah Levitt
Seems to me that "native-jce" ought to be one of the choices of names. Nevertheless: +1 for the proposal +1 for Juice Noah On Thu, Mar 04, 2004 at 13:56:16 +1100, Berin Lautenbach wrote: > > > 1. Juice > 2. Janice > 3. Juice 'n Jin > > > To start : > > > +1 for the proposal and +1 for "Jui

Re: Decryption issue.

2004-03-04 Thread Sachin Tarnekar
Berin,   Yes, this was the problem. Thanks for fixing it. It works fine with your code change.   Thanks, Sachin. Berin Lautenbach <[EMAIL PROTECTED]> wrote: Sachin,I have just checked a new version of XMLCipher into CVS - could you have a try?We were only grabbing the first node beneath , so i

Re: Question on JCE 1.5 key wraps

2004-03-04 Thread Sean Mullan
Here are the missing algorithms, please update config.xml and rerun the tests: MessageDigest: Provider "SUN" supports MD5, SHA-256, SHA-384, & SHA-512 Signature: Provider "SunJSSE" supports MD5withRSA, SHA1withRSA MAC: Provider "SunJCE" supports HmacMD5, HmacSHA256, HmacSHA384, HmacSHA512 We do

Re: Question on JCE 1.5 key wraps

2004-03-04 Thread Davanum Srinivas
Sean, Update the junit test result - http://nagoya.apache.org/~dims/xmlsec-junit/. Here's my config.xml http://nagoya.apache.org/~dims/xmlsec-junit/config.xml. Results are just slightly better. Can you please update config.xml and send us something that passes all the tests? thanks, dims ---

Re: What's the Difference

2004-03-04 Thread Berin Lautenbach
> Vishal Mahajan wrote: >> Maybe I'll put my question again in other words -- >> >>What's the difference between "wrapping a key" and "encrypting >>a >> key" :-\ ? > > Key wrapping algorithms are especially designed to provide extra > security for encrypting and decrypting keys, as

Re: [VOTE] Native JCE Proposal

2004-03-04 Thread Berin Lautenbach
> Seems to me that "native-jce" ought to be one of the choices > of names. Nevertheless: That'll teach me to do things quickly :<. You are absolutely correct - it should have been, and my apologies for dropping it. I got overly excited with all the other suggestions. Nothing is locked in stone a

Re: Question on JCE 1.5 key wraps

2004-03-04 Thread Berin Lautenbach
> Sean, > Update the junit test result - > http://nagoya.apache.org/~dims/xmlsec-junit/. Here's my config.xml > http://nagoya.apache.org/~dims/xmlsec-junit/config.xml. Results are > just slightly better. > > Can you please update config.xml and send us something that passes all > the tests? OK -

[GUMP@lsd]: xml-security/xml-security failed

2004-03-04 Thread Sam Ruby
To whom it may engage... This is an automated request, but not an unsolicited one. For help understanding the request please visit http://gump.apache.org/nagged.html, and/or contact [EMAIL PROTECTED] Project xml-security has an issue affecting it's community integration. This issue af

[GUMP@lsd]: xml-security/xml-security failed

2004-03-04 Thread Sam Ruby
To whom it may engage... This is an automated request, but not an unsolicited one. For help understanding the request please visit http://gump.apache.org/nagged.html, and/or contact [EMAIL PROTECTED] Project xml-security has an issue affecting it's community integration. This issue af