Re: POI bug 57595

[Nick Burch <ap...@gagravarr.org>]

On Thu, 19 Feb 2015, Andreas Beeker wrote:
>> P.S. BTW why using bcprov when today built-in into JDK javax.crypto 
>> package gives everything (in imho better shape and performance) 
>> out-of-the-box including AES256?
>
> the compile-lib is for additional libraries which are used for features 
> like xml signatures or additional encryption settings, just have a look 
> CipherAlgorithm or HashAlgorithm to see which algorithm are not 
> supported ... and of course we are based on JDK 6, so newer 
> implementations can't be taken into account

At some point (though not yet!), we'll find some reason why we need to 
bump the minimum JDK version up to 7. While the signature stuff is fresh 
in mind, is it worth raising a bug in bugzilla and noting down what'd be 
involved in swapping from bouncy castle to javax.crypto when we do? That 
way, as and when we have the need to move to a newer JDK/JVM, we've notes 
on how to reduce dependencies when we do!

Thanks
Nick

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org

Re: POI bug 57595

[Andreas Beeker <an...@gmx.de>]

> At some point (though not yet!), we'll find some reason why we need to bump the minimum JDK version up to 7. While the signature stuff is fresh in mind, is it worth raising a bug in bugzilla and noting down what'd be involved in swapping from bouncy castle to javax.crypto when we do? That way, as and when we have the need to move to a newer JDK/JVM, we've notes on how to reduce dependencies when we do! 

I've tried to use the jdk classes, but at a point I was confronted with using either internal sun.* packages, which partly weren't contained in the JRE, copying the sun sources or using bouncycastle.
I don't think we will get rid of the bc jar in the near future - but this only applies to xml signature and extended hashing/cipher algorithm, so the dependencies for the typical use aren't affected

Andi


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org