[88545] in cryptography@c2.net mail archive
Re: no surprise - Sun fails to open source the crypto part of Java
daemon@ATHENA.MIT.EDU (zooko@zooko.com)
Mon May 14 19:52:18 2007
To: Ian G <iang@systemics.com>
cc: Nicolas Williams <Nicolas.Williams@sun.com>,
Cryptography <cryptography@metzdowd.com>,
Florian Weimer <fw@deneb.enyo.de>
From: zooko@zooko.com
Reply-To: zooko@zooko.com
In-reply-to: <46485134.30909@systemics.com>
Date: Mon, 14 May 2007 11:06:47 -0600
Ian G wrote:
>
> Third option: the architecture of Sun's Java crypto
> framework is based on motives that should have been avoided,
> and have come back to bite (again).
>
> The crypto framework in Java as designed by Sun was built on
> motives (nefarious, warped or just plain stupid, I don't
> know) such as
>
> * the need or desire to separate out encryption from
> authentication,
...
> * some notion that crypto code should be ("must be") a
> competitive market,
...
> * circular dependency
...
> * Being dependent on PKI style certificates for signing,
...
The most important motivation at the time was to avoid the risk of Java being
export-controlled as crypto. The theory within Sun was that "crypto with a
hole" would be free from export controls but also be useful for programmers.
Regards,
Zooko
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
