Enterprise Java Security: Building Secure J2EE Applications

From JDK Vonward, Java provides general-purpose APIs and service provider interfaces (SPIs) for cryptographic functions, collectively known as Java Cryptography Architecture and Java Cryptography Extension....

The J2EE and J2SE APIs and runtime environments are shipped with security-related classes. The set of core classes in the Java 2 platform can be...

This section explains how to use the most important JCA API classes from within Java programs in a J2EE environment. 11.The java.security.SecureRandom Class This class provides a...

The JCE framework and implementations for encryption, key generation, key agreement, and MAC algorithms supplement the message digest and digital-signature interfaces and implementations provided in...

Listing on page showed how to encrypt and then decrypt the contents of a file in the same code fragment. However, real-life situations are more...

Within a J2EE environment, the security server is the primary user of the JCA to validate signatures on transactions and certificates. However, all primary and...