Joint Conferences Tutorial
| Java Cryptography
Prof. Ray Kresman, Bowling Green State University, USA Date: June 28, 2006 Time: 6:00 - 9:30 PM Room: 1 |
Java was introduced as an OOP language less than a decade ago. It is already becoming the preferred language of choice for both stand-alone and web enabled applications. However, aspects of Java Cryptography are less well understood. It has relevance to the design and deployment of secure Java application by software developers. Following an overview of the Java programming language, we will discuss Java Cryptography. The cryptographic capabilities of Java make it an attractive vehicle for building secure applications. For example, the Java Cryptographic Extension (JCE) promises plug-in cryptographic libraries and seamless addition of a number of security components and services such as message digests, digital signatures, random number generators and algorithms for symmetric and public key cryptography. This tutorial provides an overview of the Java cryptographic library features. We will describe some of the cryptographic mechanisms and their use.
OBJECTIVES
- Understand basics of cryptography and their provisions in Java
- Be familiar with the role of Java security manager
- Know how to override methods of the security manager
- Know the methods and usage options of Java cryptographic modules
- Write simple programs for computing digests and doing authentications
- Understand basics of SSL and their deployment in Java
INTENDED AUDIENCE
This tutorial is geared for computer professionals and software developers interested in writing secure applications in Java.
Course Outline
- Overview
- Java language
-
- Overview
- Applets & applications
- Java security
-
- Visibility and security features
- Rights of application
- Rights of Applet
- Java Cryptographic Extension (JCE)
-
- Security
- What is JCE?
- JCE components
- Using JCE in applications and applets.
- Secure communication
-
- DES classes
- Member functions
- Implementation of DES
- Examples
- Key exchange
-
- Key exchange b/w strangers
- Diffie Hellman protocol
- Digest Algorithms
-
- Message digest class
- Securing a digest in Java
- MD5 and Secure hash
- Java SSL
- Concluding Remarks
BIOGRAPHY OF INSTRUCTOR
Ray Kresman is a Professor of Computer Science at Bowling Green State University, Bowling Green, OH. His applied computer science interests include computer security and web-to-database connectivity, three-tier architectures and secure Internet technologies, and data warehousing. The National Science Foundation supported Dr. Kresman?s work on distributed systems. He has published widely in the area of distributed systems and complexity of algorithms.
Dr. Ray Kresman
Professor of Computer Science
Bowling Green State University
Bowling Green, OH, USA
E-mail: rama@cs.bgsu.edu