Tag Info

New answers tagged

1

Nitpick: keytool accepts both alias and keypass if specified; if not specified it prompts for key password if needed but defaults alias to mykey. A JCEKS file can be operated on either by keytool or by other code. JCEKS can support three types of entries: privateKey, trustedCert, and secretKey (the older and default JKS file can do the first two). The ...


0

If you definitely can't use other libraries such as Bouncy Castle, your best option is probably to just add an HMAC authentication tag (it should be easy to write a MacInputStream/MacOutputStream to chain it into your existing pipeline). The primary reason is that the JDK 8 (at least up to 1.8.0_25) GCM implementation suffers from two problems that make it ...


-1

You should get the IV of CBC as the first ciphertext block. Wikipedia: CBC



Top 50 recent answers are included