CryptoXpress CF

Overview | Pricing & Licensing | Evals & Downloads | Compatibility | Publisher Details | Reviews | Support Forum | Summary

A ColdFusion tag that supports AES, TripleDES, MD5 and SHA1. CryptoXpress CF is a ColdFusion tag that encrypts and decrypts data using the AES or TripleDES (3DES) algorithm. AES and TripleDES both qualify as "strong encryption" as defined by the National Institute of Standards and Technology (NIST). CryptoXpress CF produces compatible results on any ColdFusion platform including Windows, Linux (Red Hat and SUSE), HPUX and Solaris. Implementation of the algorithms has been verified using test vectors published by the NIST. The cross platform capabilities of CryptoXpress CF allow users to encrypt data on one platform and decrypt it on the same or another platform.

Our regular prices are shown below. Please logon to see your discounted prices.

CryptoXpress CF V9.0

Our prices include ComponentSource technical support and, for most downloadable products, an online backup and a FREE upgrade to the new version if it is released within 30 days of your purchase.  All sales are made on our standard Terms and Conditions and subject to our Return Policy. Please contact us if you require any licensing option not listed above including volume licensing and previous versions.

Our regular prices are shown above. Please logon to see your discounted prices.

CryptoXpress CF is a ColdFusion tag that encrypts and decrypts data using the AES or TripleDES (3DES) algorithm. AES and TripleDES both qualify as “strong encryption” as defined by the National Institute of Standards and Technology (NIST). CryptoXpress CF produces compatible results on any ColdFusion platform including Windows, Linux (Red Hat and SUSE), HPUX and Solaris. Implementation of the algorithms has been verified using test vectors published by the NIST. The cross platform capabilities of CryptoXpress CF allow users to encrypt data on one platform and decrypt it on the same or another platform. CryptoXpress CF is intended for use by ColdFusion programmers who need a cryptography solution but have limited programming skills or simply don’t want to write and maintain complex code that requires cryptography skills. Several ColdFusion sample programs are provided that demonstrate how to use the tag to encrypt and decrypt data, encrypt and decrypt files, digest data and digest files.

Multiple “strong encryption” encryption/decryption algorithms support:

• TripleDES
• AES 128-bit
• AES 256-bit

Multiple message digest algorithms support:

• MD5
• SHA1

Since there are thousands of possible ways to deploy encryption, CryptoXpress SDK simplified the selection process by reducing the selection of encryption algorithms to three “preferred” combinations:

• AES128/PKCS5Padding/CBC - 128-bit encryption
• AES256/PKCS5Padding/CBC - 256-bit encryption
• TripleDES/PKCS5Padding/CBC - effectively 112-bit encryption

CFXWorks recommends the use of AES encryption where there is a need to deploy “strong encryption”. The reasoning is as follows. On May 19, 2005, NIST announced the withdrawal of the (single) Data Encryption Standard (DES) as specified in FIPS 46-3. DES no longer provides the security that is needed to protect Federal government information. Federal government organizations are now encouraged to use FIPS 197, Advanced Encryption Standard (AES), which specifies a faster and stronger algorithm. For some applications, Federal government departments and agencies may use the Triple Data Encryption Algorithm (Triple DES) as specified in NIST Special Publication 800-67. Triple DES is also supported by CryptoXpress CF. Although thought to be considerably less secure than even AES 128-bit encryption, Triple DES is still commonly used in some industries.

The following Java programs are included in CryptoXpress CF:

• Java_Xpress_Encrypt_File.cfm - Sample that encrypts and decrypts a file
• Java_Xpress_Encrypt_FileHex.cfm - Sample that encrypts and decrypts a file using a key and iv submitted in HEX format
• Java_Xpress_Encrypt_File_COMP.cfm - Sample that encrypts and decrypts a file using modes that create results that are compatible with CFXWorks’ original CFX_ENCRYPT_AES tag
• Java_Xpress_Encrypt_String.cfm - Sample that encrypts and decrypts a string
• Java_Xpress_Encrypt_String_COMP.cfm - Sample that encrypts and decrypts a string using modes that create results that are compatible with CFXWorks’ original CFX_ENCRYPT_AES tag
• Java_Xpress_MD5_File.cfm - Sample that creates a MD5 digest for a file
• Java_Xpress_MD5_String.cfm - Sample that creates a MD5 digest for a string
• Java_Xpress_SHA1_File.cfm - Sample that creates a SHA1 digest for a file
• Java_Xpress_SHA1_String.cfm - Sample that creates a SHA1 digest for a string
• Java_Xpress_Ascii2Hex.cfm - Sample that encodes an ASCII string in HEX then decodes it back to ASCII
• Java_Xpress_Ascii2Base64.cfm - Sample that encodes an ASCII string in BASE64 then decodes it back to ASCII

Why use CryptoXpress CF:

• Use strong encryption and message digests without writing cryptography code
• Deploy best-of-breed cryptography techniques without knowing implementation details
• Consistency verified across all supported environments
• Correctness of the implementation verified using NIST test vectors
• Resource & skill level minimized by use of “best practices” scenarios
• Compatible results across all ColdFusion 6.0, or more recent version, of ColdFusion