3 Oracle JCE Provider

The Java Cryptography Extension (JCE) from Sun Microsystems is an optional package to the Java 2 platform. It is a framework for implementing encryption, key generation and key agreement, and Message Authentication Code (MAC) algorithms.

The Oracle JCE Provider package supplies a concrete implementation of a subset of the cryptographic services defined in JCE 1.2.1.

This chapter contains these topics:

Features and Benefits of Oracle JCE Provider
Setting Up Your Oracle JCE Provider Environment

3.1 Features and Benefits of Oracle JCE Provider

Oracle JCE Provider supports a number of cryptographic algorithms in the following application areas:

Ciphers -
- AES
- Blowfish
- DES
- Triple DES
- DSA
- RC2
- RSA
- RC4
- PBE with MD2/MD5/SHA1 and DES/RC2/Triple DES/RC4
KeyAgreement: Diffie-Hellman with two or more parties
PKCS5Padding and NoPadding support for:
- RSA
- AES
- DES
- Triple DES
- RC2
- Blowfish
PKCS1Padding and OAEPPadding for RSA
Support for standard key ranges
KeyFactory:
- RSA
- DSA
- Diffie-Hellman
SecretKeyFactory:
- AES
- Blowfish
- DES
- Triple DES
- DSA
- RC2
- RC4
- HMAC-MD5
- HMAC-SHA1
- PBE with MD2/MD5/SHA1 and DES/RC2/Triple DES/RC4
Support for X.509EncodedKeySpec and PKCS8EncodedKeySpec
KeyPairGeneration:
- RSA
- DSA
- Diffie-Hellman
Note:
While the minimum acceptable strength is 512, Oracle JCE Provider supplies a default strength of 1024.
KeyGeneration:
- AES
- Blowfish
- DES
- Triple DES
- RC2
- RC4
- HMAC-MD5
- HMAC-SHA1
Standard default parameters for DSA (same as those provided by SunJCE)
Message Digests:
- MD2
- MD5
- SHA-1
- SHA-256
- SHA-284
- SHA-512
Signatures:
- SHA1withDSA
- MD5withRSA
- SHA1withRSA
- MD2withRSA
MAC:
- HMAC-MD5
- HMAC-SHA1
Support for standard ASN1 encodings
SecureRandom:
- MD5PRNG
- SHA1PRNG
Pseudo-random number generators, using proprietary algorithms based on the Bruce Schneier/Applied Cryptography design pattern
Support for X509 certificates
Key Store:
- PKCS#8
- PKCS#12

3.1.1 Using the Oracle JCE Provider

For more information about the Java Cryptography Extension and how to use the Oracle JCE Provider, please refer to the Sun JCE documentation at:

http://java.sun.com/products/jce/

3.2 Setting Up Your Oracle JCE Provider Environment

The Oracle Security Developer Tools are installed with Oracle Application Server in ORACLE_HOME. This section explains how to set up your environment for Oracle JCE Provider. It contains these topics:

System Requirements for Oracle JCE Provider
Installation Requirements
Setting the CLASSPATH Environment Variable

3.2.1 System Requirements for Oracle JCE Provider

Oracle JCE Provider is compatible with Java Cryptography Extension (JCE) version 1.2.1. In order to use Oracle JCE Provider, you must install JCE 1.2.1 on your system.

The Java Cryptography Extension is available from Sun Microsystems at:

http://java.sun.com/products/jce/

3.2.2 Installation Requirements

Add the following line to your java.security file, which is usually located in $JAVA_HOME/jre/lib/security:

security.provider.1=com.phaos.jce.provider.Phaos

When installing the distribution files, the location of the Oracle JCE Provider jar file depends on where the JCE 1.2.1 framework is installed:

If the JCE 1.2.1 framework is an "installed" extension

If the JCE 1.2.1 framework is an installed extension, the following files:

jce1_2_1.jar
jce_provider_jdk1x.jar
US_export_policy.jar
local_policy.jar

must appear in the standard location for jar files of an installed extension:

File	Platform
`$JAVA_HOME\lib\ext`	Win32
`$JAVA_HOME/lib/ext`	Solaris

where $JAVA_HOME refers to the directory where the Java software is installed.

If the JCE 1.2.1 framework is located on the classpath

If the JCE 1.2.1 framework is not installed as an extension but instead is located on the class path, and a security manager is installed, you need to grant permissions to the JCE 1.2.1 framework and JCE providers when you run applets or applications using JCE.

3.2.3 Setting the CLASSPATH Environment Variable

Your CLASSPATH environment variable must contain the full path and file names to the required jar and class files. Make sure that the the following files are included in your CLASSPATH:

osdt_core3.jar
osdt_jce.jar

3.2.3.1 Setting the CLASSPATH on Windows

To set your CLASSPATH on Windows:

In your Windows Control Panel, select System.
In the System Properties dialog, select the Advanced tab.
Click Environment Variables.
In the User Variables section, click New to add a CLASSPATH environment variable for your user profile. If a CLASSPATH environment variable already exists, select it and click Edit.
Add the full path and file names for all of the required jar and class files to the CLASSPATH.

For example, your CLASSPATH might look like this:
```
C:\ORACLE_HOME\jlib\osdt_core3.jar;
C:\ORACLE_HOME\jlib\osdt_jce.jar
```
Click OK.

3.2.3.2 Setting the CLASSPATH on UNIX

On UNIX, set your CLASSPATH environment variable to include the full path and file name of all of the required jar and class files. For example:

setenv CLASSPATH $CLASSPATH:$ORACLE_HOME/jlib/osdt_core3.jar:\
$ORACLE_HOME/jlib/osdt_jce.jar