---

Please note: This page was retired in September 2010.

You can find current information from the links below

Publisher

• CFXWorks (3)

Categories

• Encryption (104)

If you need to buy a license for this specific version, please contact us for availability and pricing.

Other information on this page is shown for historical reference only and may have changed considerably since.

---

CryptoXpress CF is a ColdFusion tag that encrypts and decrypts data using the AES or TripleDES (3DES) algorithm. AES and TripleDES both qualify as “strong encryption” as defined by the National Institute of Standards and Technology (NIST). CryptoXpress CF produces compatible results on any ColdFusion platform including Windows, Linux (Red Hat and SUSE), HPUX and Solaris. Implementation of the algorithms has been verified using test vectors published by the NIST. The cross platform capabilities of CryptoXpress CF allow users to encrypt data on one platform and decrypt it on the same or another platform. CryptoXpress CF is intended for use by ColdFusion programmers who need a cryptography solution but have limited programming skills or simply don’t want to write and maintain complex code that requires cryptography skills. Several ColdFusion sample programs are provided that demonstrate how to use the tag to encrypt and decrypt data, encrypt and decrypt files, digest data and digest files.

Multiple “strong encryption” encryption/decryption algorithms support:

• TripleDES
• AES 128-bit
• AES 256-bit

Multiple message digest algorithms support:

• MD5
• SHA1

Since there are thousands of possible ways to deploy encryption, CryptoXpress SDK simplified the selection process by reducing the selection of encryption algorithms to three “preferred” combinations:

• AES128/PKCS5Padding/CBC - 128-bit encryption
• AES256/PKCS5Padding/CBC - 256-bit encryption
• TripleDES/PKCS5Padding/CBC - effectively 112-bit encryption

CFXWorks recommends the use of AES encryption where there is a need to deploy “strong encryption”. The reasoning is as follows. On May 19, 2005, NIST announced the withdrawal of the (single) Data Encryption Standard (DES) as specified in FIPS 46-3. DES no longer provides the security that is needed to protect Federal government information. Federal government organizations are now encouraged to use FIPS 197, Advanced Encryption Standard (AES), which specifies a faster and stronger algorithm. For some applications, Federal government departments and agencies may use the Triple Data Encryption Algorithm (Triple DES) as specified in NIST Special Publication 800-67. Triple DES is also supported by CryptoXpress CF. Although thought to be considerably less secure than even AES 128-bit encryption, Triple DES is still commonly used in some industries.

The following Java programs are included in CryptoXpress CF:

• Java_Xpress_Encrypt_File.cfm - Sample that encrypts and decrypts a file
• Java_Xpress_Encrypt_FileHex.cfm - Sample that encrypts and decrypts a file using a key and iv submitted in HEX format
• Java_Xpress_Encrypt_File_COMP.cfm - Sample that encrypts and decrypts a file using modes that create results that are compatible with CFXWorks’ original CFX_ENCRYPT_AES tag
• Java_Xpress_Encrypt_String.cfm - Sample that encrypts and decrypts a string
• Java_Xpress_Encrypt_String_COMP.cfm - Sample that encrypts and decrypts a string using modes that create results that are compatible with CFXWorks’ original CFX_ENCRYPT_AES tag
• Java_Xpress_MD5_File.cfm - Sample that creates a MD5 digest for a file
• Java_Xpress_MD5_String.cfm - Sample that creates a MD5 digest for a string
• Java_Xpress_SHA1_File.cfm - Sample that creates a SHA1 digest for a file
• Java_Xpress_SHA1_String.cfm - Sample that creates a SHA1 digest for a string
• Java_Xpress_Ascii2Hex.cfm - Sample that encodes an ASCII string in HEX then decodes it back to ASCII
• Java_Xpress_Ascii2Base64.cfm - Sample that encodes an ASCII string in BASE64 then decodes it back to ASCII

Why use CryptoXpress CF:

• Use strong encryption and message digests without writing cryptography code
• Deploy best-of-breed cryptography techniques without knowing implementation details
• Consistency verified across all supported environments
• Correctness of the implementation verified using NIST test vectors
• Resource & skill level minimized by use of “best practices” scenarios
• Compatible results across all ColdFusion 6.0, or more recent version, of ColdFusion