Comments on: Securing Java Objects for Plain Text Transport http://blog.arc90.com/2008/08/26/securing-java-objects-for-plain-text-transport/ Web Application Design & Development Thu, 09 Sep 2010 19:09:18 -0400 http://wordpress.org/?v=2.9.1 hourly 1 By: Chris Dary http://blog.arc90.com/2008/08/26/securing-java-objects-for-plain-text-transport/#comment-6508 Chris Dary Sat, 05 Jun 2010 00:40:15 +0000 http://blog.daniell.acr90-dev-02/2008/08/26/securing-java-objects-for-plain-text-transport/#comment-6508 Hi Sam, You are, of course, absolutely correct. I've updated the post to reflect that this should be only used as proof of concept level code. Hi Sam,

You are, of course, absolutely correct. I’ve updated the post to reflect that this should be only used as proof of concept level code.

]]> By: Sam Quigley http://blog.arc90.com/2008/08/26/securing-java-objects-for-plain-text-transport/#comment-6507 Sam Quigley Sat, 05 Jun 2010 00:28:57 +0000 http://blog.daniell.acr90-dev-02/2008/08/26/securing-java-objects-for-plain-text-transport/#comment-6507 This is *not* a good way to store secrets. The DES algorithm has been considered weak since the late 90s, and ECB mode is totally unsuitable for most purposes. For details, see: http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Electronic_codebook_.28ECB.29 http://en.wikipedia.org/wiki/Data_Encryption_Standard#Chronology People looking for a simple way to encrypt things in Java should probably try Keyczar instead: http://www.keyczar.org/ -sq This is *not* a good way to store secrets. The DES algorithm has been considered weak since the late 90s, and ECB mode is totally unsuitable for most purposes. For details, see:

http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Electronic_codebook_.28ECB.29
http://en.wikipedia.org/wiki/Data_Encryption_Standard#Chronology

People looking for a simple way to encrypt things in Java should probably try Keyczar instead: http://www.keyczar.org/

-sq

]]> By: Oliver Heidan http://blog.arc90.com/2008/08/26/securing-java-objects-for-plain-text-transport/#comment-718 Oliver Heidan Tue, 19 May 2009 05:58:51 +0000 http://blog.daniell.acr90-dev-02/2008/08/26/securing-java-objects-for-plain-text-transport/#comment-718 Thank you for your code. It's very helpful to me. Thank you for your code. It’s very helpful to me.

]]>