no surprise - Sun fails to open source the crypto part of Java

[zooko at zooko.com]

 Ian G wrote:
>
> Third option:  the architecture of Sun's Java crypto 
> framework is based on motives that should have been avoided, 
> and have come back to bite (again).
> 
> The crypto framework in Java as designed by Sun was built on 
>   motives (nefarious, warped or just plain stupid, I don't 
> know) such as
> 
> * the need or desire to separate out encryption from 
> authentication,
...
> * some notion that crypto code should be ("must be") a 
> competitive market,
...
> * circular dependency 
...
> * Being dependent on PKI style certificates for signing, 
...

The most important motivation at the time was to avoid the risk of Java being
export-controlled as crypto.  The theory within Sun was that "crypto with a
hole" would be free from export controls but also be useful for programmers.

Regards,

Zooko

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com