OpenPGP Library for Java improves key management

In version 2.5.7, expired and revoked public keys are not accepted for encryption.

Zoom [+]

Encrypting using OpenPGP Library for Java.

OpenPGP Library for Java is a pure Java library that simplifies OpenPGP cryptographic development. Many financial companies and IT departments searching for a proven OpenPGP solution in Java have saved time with this simple yet powerful SDK. OpenPGP for Java allows you to perform common OpenPGP tasks: encrypt, decrypt, sign, sign and encrypt, verify, clear sign, generate OpenPGP keys and more. OpenPGP for Java supports JDK 1.4+ (1.4, 1.5, 1.6) from Sun (now Oracle) or IBM OS Windows, Mac OS X, Solaris, RedHat, SuSE, Ubuntu, AIX, HP-UX, FreeBSD. The encrypted files created with the library are compatible with the OpenPGP standard, and can be opened with PGP software and GnuPG. Runtime Royalty Free.

Updates in 2.5.7

A key change in this release is that by default expired and revoked public keys are not accepted for encryption. If you still wish to use such keys you will have to enable them by calling PGPLib.setUseExpiredKeys(true) and PGPLib.setUseRevokedKeys(true)

• Fixed: cleanup of half encrypted files after an exception for all methods.
• Fixed: importing keys from PGP 6.5 into a KeyStore
• Modified: KeyStore.importPrivateKey now throws also NoPrivateKeyFoundException (extends PGPException) if the specified file does not contain a private key.
• Added method: static KeyStore.checkPassword(keystoreFile, password) – checks is a given password for a keystore file correct.
• Added method: PGPLib.decryptAndVerifyFileTo – decrypts a file content with its original name(s) into a folder
• Added method: PGPLib.decryptAndVerifyStreamTo – decrypts a stream content with its original name(s) into a folder
• Added method: PGPLib.setUseExpiredKeys(true) – switches on/off the check are the encryption keys expired
• Added method: PGPLib.setUseRevokedKeys(true) – switches on/off the check are the encryption keys revoked
• Added method: PGPLib.isUseExpiredKeys() – returns the state of the check are the encryption keys expired
• Added method: PGPLib.isUseRevokedKeys() – returns the state of the check are the encryption keys revoked
• Added method: KeyPairInformation.checkPassword(password) – checks is a given password for a private key correct.
• Added method: KeyPairInformation.hasPrivateKey() – returns is there a private key in this key pair.
• Added method: KeyPairInformation.isExpired() – indicates is the public key expired
• Added method: KeyPairInformation.isExpiredOnDate(java.util.Date) – checks will the key be expired on a given date
• New Exception: Added class com.didisoft.pgp.exceptions.NonPGPDataException (extends PGPException) thrown from all decrypt and decryptAndVerify methods when the supplied for decryption data is not an OpenPGP message.
• New Exception: Added class com.didisoft.pgp.exceptions.KeyIsExpiredException (extends PGPException) thrown from all encrypt and signAndEncrypt methods when the supplied public key is expired. Can be suppressed with PGPLib.setUseExpiredKeys(true)
• New Exception: Added class com.didisoft.pgp.exceptions.KeyIsRevokedException (extends PGPException) thrown from all encrypt and signAndEncrypt methods when the supplied public key is revoked. Can be suppressed with PGPLib.setUseRevokedKeys(true)

About DidiSoft

DidiSoft products will save you time and money to build encryption in your applications, using their simple API interfaces for .NET and Java. DidiSoft has developed many software products and services. Creating advanced solutions that have helped hundreds of companies from around the world.