-
Enhancement
-
Resolution: Fixed
-
P3
-
1.4.0
-
merlin
-
generic
-
generic
Name: me32167 Date: 11/02/99
The Java Cryptography Extension (JCE) 1.2 is an officially released Standard
Extension to the Java 2 Platform. JCE 1.2 provides a framework and
implementation for encryption, key generation and key agreement, and Message
Authentication Code (MAC) algorithms. JCE 1.2 supplements the Java 2 platform,
which already includes interfaces and implementations of message digests and
digital signatures.
But JCE 1.2 cannot be exported outside the U.S. or Canada. This has limited
its usability and deployment. JCE Fontanel (the next release of JCE) has made
JCE exportable since its added JCE framework and provider mutual authentication
and a mechanism to control available cryptographic strength via jurisdiction
policy files. This is very important to keep and attract JCE users, and ensure
ubiquity. This also makes it possible to add JCE into the core Java SDK.
Compared to more mature cryptography frameworks (such as CDSA), JCE 1.2 lacks
key wrapping and some key management functionality such as key usage control.
Without key wrapping, exporting and importing keys is difficult. JCE Fontanel
supports key wrapping and key usage control.
The APIs in JCE would have be in the core SDK except for the export issue.
The JCE should be added to the core SDK now that the export issue has been
resolved.
JCE Fontanel will be delivered as an Optional Package before the Merlin
release.
======================================================================
sharon.liu@eng 2000-03-22