Fred, actually I did, already some years ago, the results showed a performane improvement of a factor 2-4, depending on the use case. Most obious the asymmetric Crypto algorithmes benefit more than symmetrical. I'll dig into the archives to get the e-mail where I reported the results.
However, JuiCE was frozen and not develped any further, JuiCE is a JCE, that is it has a signed JAR. Thus if it can behave as a frontend to another (pure Java JCE) remains to be checked. Regards, Werner > -----Ursprüngliche Nachricht----- > Von: ext Fred Dushin [mailto:[EMAIL PROTECTED] > Gesendet: Donnerstag, 24. April 2008 15:27 > An: Ruchith Fernando > Cc: wss4j-dev > Betreff: Re: IDEA patents and BouncyCastle > > Ah, so that's the genesis of Juice. > > Is it still a JNI bridge to openssl? I think that's > basically a good > thing (wearing my geeky "C" hat), though can be pretty > complicated for > obscure platforms, and of course is difficult to debug. > > I wonder if Juice would accept contributions towards a pure Java > provider implementation? > > Has Werner done any performance benchmarks on Juice, say, against > Sun's JCE, or BC? > > -Fred > > On Apr 24, 2008, at 8:31 AM, Ruchith Fernando wrote: > > > On Thu, Apr 24, 2008 at 5:10 PM, Fred Dushin <[EMAIL PROTECTED]> > > wrote: > >> I didn't look at it closely, but I had the impression that they > >> yanked > >> a bunch of classes out of BC and copied them into > geronimo, under the > >> org.apache.geronimo namespace. So using this JAR would > require some > >> changes in WSS4J (which I've proposed, anyway). > >> > >> I think it would be less risky if we just forced users to > download BC > >> themselves. > > > > +1 > > > >> > >> I'm not sure what the implications are for testing, since > we'll need > >> to do the same. > >> > >> Perhaps it's time for apache to start a JCE provider > project. It'd > >> be > >> lots of fun (some people get a thrill from that sort of thing, I > >> guess), but it would also be a lot of work. > > > > Werner has already done some work on it : > > https://svn.apache.org/repos/asf/incubator/juice/ > > > > Thanks, > > Ruchith > > > >> > >> -Fred > >> > >> > >> On Apr 24, 2008, at 4:37 AM, Ruchith Fernando wrote: > >> > >> > >> > >>> Seems like this [1] jar won't work : > >>> > >>> $ jarsigner -verify geronimo-util-1.0.jar > >>> jar is unsigned. (signatures missing or not parsable) > >>> > >>> Also I don't see any BC classes in the jar. > >>> > >>> Thanks, > >>> Ruchith > >>> > >>> 1. > >> > http://repo1.maven.org/maven2/org/apache/geronimo/geronimo-uti l/1.0/geronimo-util-1.0.jar > >>> > >>> On Wed, Apr 23, 2008 at 9:19 PM, Daniel Kulp <[EMAIL PROTECTED]> > >>> wrote: > >>> > >>>> > >>>> I believe the geronimo folks already created a non-idea jar: > >>>> > >> > http://repo1.maven.org/maven2/org/apache/geronimo/geronimo-uti l/1.0/geronimo-util-1.0.jar > >>>> > >>>> Not sure the state of it though or how well it works. > >>>> > >>>> Dan > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> On Wednesday 23 April 2008, Nandana Mihindukulasooriya wrote: > >>>> > >>>>> Hi Devs, > >>>>> > >>>>> I was thinking along the lines of a little pluggable piece of > >>>>> code, > >>>>> which > >>>>> > >>>>> > >>>>>> would let the user initialize the JCE, as needed. This code > >>>>>> could > >>>>>> be dynamically loaded, and driven off configuration and > >>>>>> findable on > >>>>>> the CLASSPATH (to hopefully mitigate race conditions with our > >>>>>> startup/initialization code). > >>>>>> > >>>>> > >>>>> +1. At the same time, it seems that people in the > [EMAIL PROTECTED] > >>>>> [1],[2] were interested in a bouncycastle jar w/o the algorithm > >>>>> included. IMHO, it would be great if we can get this done as > >>>>> this will > >>>>> remove the unnecessary hassle from the users to download it > >>>>> themselves. It seems David from BC was willing to do > that [3], > >>>>> wonder > >>>>> what happened. > >>>>> > >>>>> thanks, > >>>>> nandana > >>>>> > >>>>> [1] - > >>>>> > http://mail-archives.apache.org/mod_mbox/www-legal-discuss/200508.mbox > >>>>> /[EMAIL PROTECTED] [2] - > >>>>> > http://mail-archives.apache.org/mod_mbox/www-legal-discuss/200508.mbox > >>>>> /[EMAIL PROTECTED] [3] - > >>>>> http://www.bouncycastle.org/devmailarchive/msg05065.html > >>>>> > >>>> > >>>> > >>>> > >>>> -- > >>>> J. Daniel Kulp > >>>> Principal Engineer, IONA > >>>> [EMAIL PROTECTED] > >>>> http://www.dankulp.com/blog > >>>> > >>>> > >>>> > >>>> > --------------------------------------------------------------------- > >>>> To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>> For additional commands, e-mail: [EMAIL PROTECTED] > >>>> > >>>> > >>>> > >>> > >>> > >>> > >>> -- > >>> http://blog.ruchith.org > >>> http://wso2.org > >>> > >>> > --------------------------------------------------------------------- > >>> To unsubscribe, e-mail: [EMAIL PROTECTED] > >>> For additional commands, e-mail: [EMAIL PROTECTED] > >>> > >>> > >>> > >> > >> > >> > --------------------------------------------------------------------- > >> To unsubscribe, e-mail: [EMAIL PROTECTED] > >> For additional commands, e-mail: [EMAIL PROTECTED] > >> > >> > > > > > > > > -- > > http://blog.ruchith.org > > http://wso2.org > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
