Hi,
I developed some piece of code which implements AES-256 symetric cipher in CBC mode. I needed to replace the policy files of Java runtime. You need this to use keys bigger than 128 bits. So I did this, I configured both eclipse and talend runtime environment in the same way. But when I copy my fully functional code from Eclipse Java project into Talend Routine and try to run crypto methods with key bigger more than 128 bits, it throws an exception on Illegal key size, which means that it is using the standard policy files. But the IDE is configured to use JAVA_HOME with already updated policy files.
I will be glad for any suggestion. Of course the workaround is to use 128-bit length key instead of the 256-bit one, but it doesn't make any sence to me. Why 2 environments configured in the same way work in one case and doesn't work in the second one.
Seems like Talend has it's own library and maybe replace these library files in run-time. Could it be that case? Could Talend act like this?
Thank you very much.
This is the piece of code which test environment for Unlimited Stregth Jurisdiction>
public static void testEnvironment()
throws
NoSuchAlgorithmException,
NoSuchPaddingException,
GeneralSecurityException
{
// 64bits testing data block
byte[] data = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07 };
// 128bit key
SecretKey key128 = new SecretKeySpec(new byte[] { 0x00, 0x01, 0x02,
0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c,
0x0d, 0x0e, 0x0f }, ALGORITHM);
// sipher initialization and try to crypt data block with specified key
Cipher cipher = Cipher.getInstance(ALGORITHM + "/" + BLOCK_MODE + "/" + PADDING);
cipher.init(Cipher.ENCRYPT_MODE, key128, CBC_SALT);
cipher.doFinal(data);
System.out.println("128-bit test: O.K.");
// 192bit key
// sipher initialization and try to crypt data block with specified key
SecretKey key192 = new SecretKeySpec(new byte[] { 0x00, 0x01, 0x02,
0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c,
0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16,
0x17 }, ALGORITHM);
// sipher initialization and try to crypt data block with specified key
cipher.init(Cipher.ENCRYPT_MODE, key192, CBC_SALT);
cipher.doFinal(data);
System.out.println("192-bit test: O.K.");
// 256key
SecretKey key256 = new SecretKeySpec(new byte[] { 0x00, 0x01, 0x02,
0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c,
0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16,
0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
ALGORITHM);
// sipher initialization and try to crypt data block with specified key
cipher.init(Cipher.ENCRYPT_MODE, key256, CBC_SALT);
cipher.doFinal(data);
System.out.println("256-bit test: O.K.");
System.out.println("Testing of JCE restriction ended.");
cipher = null;
}
Best regards,
Ladislav Jech
