[Cryptography] Looking for feedback on new Java crypto library

[Steve Weis]

On Tue, Nov 12, 2013 at 11:31 PM, Max Kington <mkington at webhanger.com> wrote:
> On 13 Nov 2013 00:33, "Steve Weis" <steveweis at gmail.com> wrote:
>> Hi James. Have you checked out Keyczar? It has similar goals and Google
>> has been maintaining it for use in some Android libraries:
>> ...
>
> Why would you use this over bouncycastle? Which is well established and
> examined and incredibly complete. Not to mention cross platform.

(This was originally bounced for being a top post.)

Hi Max. Keyczar runs above a Java crypto provider; it doesn't replace
it. You can use Bouncy Castle as the underlying provider if you
prefer. Keyczar does use the JCE by default, though.

The goal is to abstract the Java crypto provider interface and use it
safely by default, which us similar to James' JACS.