CryptoXpress CF - Summary
by CFXWorks - Product Type: Component / Java Class
Summary
CryptoXpress CF by CFXWorks
A ColdFusion tag that supports AES, TripleDES, MD5 and SHA1. CryptoXpress CF is a ColdFusion tag that encrypts and decrypts data using the AES or TripleDES (3DES) algorithm. AES and TripleDES both qualify as "strong encryption" as defined by the National Institute of Standards and Technology (NIST). CryptoXpress CF produces compatible results on any ColdFusion platform including Windows, Linux (Red Hat and SUSE), HPUX and Solaris. Implementation of the algorithms has been verified using test vectors published by the NIST. The cross platform capabilities of CryptoXpress CF allow users to encrypt data on one platform and decrypt it on the same or another platform.
CryptoXpress CF is a ColdFusion tag that encrypts and decrypts data using the AES or TripleDES (3DES) algorithm. AES and TripleDES both qualify as “strong encryption” as defined by the National Institute of Standards and Technology (NIST). CryptoXpress CF produces compatible results on any ColdFusion platform including Windows, Linux (Red Hat and SUSE), HPUX and Solaris. Implementation of the algorithms has been verified using test vectors published by the NIST. The cross platform capabilities of CryptoXpress CF allow users to encrypt data on one platform and decrypt it on the same or another platform. CryptoXpress CF is intended for use by ColdFusion programmers who need a cryptography solution but have limited programming skills or simply don’t want to write and maintain complex code that requires cryptography skills. Several ColdFusion sample programs are provided that demonstrate how to use the tag to encrypt and decrypt data, encrypt and decrypt files, digest data and digest files.
Multiple “strong encryption” encryption/decryption algorithms support:
TripleDES
AES 128-bit
AES 256-bit
Multiple message digest algorithms support:
MD5
SHA1
Since there are thousands of possible ways to deploy encryption, CryptoXpress SDK simplified the selection process by reducing the selection of encryption algorithms to three “preferred” combinations:
AES128/PKCS5Padding/CBC - 128-bit encryption
AES256/PKCS5Padding/CBC - 256-bit encryption
TripleDES/PKCS5Padding/CBC - effectively 112-bit encryption
CFXWorks recommends the use of AES encryption where there is a need to deploy “strong encryption”. The reasoning is as follows. On May 19, 2005, NIST announced the withdrawal of the (single) Data Encryption Standard (DES) as specified in FIPS 46-3. DES no longer provides the security that is needed to protect Federal government information. Federal government organizations are now encouraged to use FIPS 197, Advanced Encryption Standard (AES), which specifies a faster and stronger algorithm. For some applications, Federal government departments and agencies may use the Triple Data Encryption Algorithm (Triple DES) as specified in NIST Special Publication 800-67. Triple DES is also supported by CryptoXpress CF. Although thought to be considerably less secure than even AES 128-bit encryption, Triple DES is still commonly used in some industries.
The following Java programs are included in CryptoXpress CF:
Java_Xpress_Encrypt_File.cfm - Sample that encrypts and decrypts a file
Java_Xpress_Encrypt_FileHex.cfm - Sample that encrypts and decrypts a file using a key and iv submitted in HEX format
Java_Xpress_Encrypt_File_COMP.cfm - Sample that encrypts and decrypts a file using modes that create results that are compatible with CFXWorks’ original CFX_ENCRYPT_AES tag
Java_Xpress_Encrypt_String.cfm - Sample that encrypts and decrypts a string
Java_Xpress_Encrypt_String_COMP.cfm - Sample that encrypts and decrypts a string using modes that create results that are compatible with CFXWorks’ original CFX_ENCRYPT_AES tag
Java_Xpress_MD5_File.cfm - Sample that creates a MD5 digest for a file
Java_Xpress_MD5_String.cfm - Sample that creates a MD5 digest for a string
Java_Xpress_SHA1_File.cfm - Sample that creates a SHA1 digest for a file
Java_Xpress_SHA1_String.cfm - Sample that creates a SHA1 digest for a string
Java_Xpress_Ascii2Hex.cfm - Sample that encodes an ASCII string in HEX then decodes it back to ASCII
Java_Xpress_Ascii2Base64.cfm - Sample that encodes an ASCII string in BASE64 then decodes it back to ASCII
Why use CryptoXpress CF:
Use strong encryption and message digests without writing cryptography code
Deploy best-of-breed cryptography techniques without knowing implementation details
Consistency verified across all supported environments
Correctness of the implementation verified using NIST test vectors
Resource & skill level minimized by use of “best practices” scenarios
Compatible results across all ColdFusion 6.0, or more recent version, of ColdFusion
A ColdFusion tag that supports AES, TripleDES, MD5 and SHA1.
PartNumbers: PC-517969-134835 517969-134835 PC-517969-134836 517969-134836 PC-517969-134837 517969-134837
PurchaseOptions: CryptoXpress CF V9.0 1 Developer License , CryptoXpress CF V9.0 Additional Developer License , CryptoXpress CF V9.0 Annual Developer Support License
Resources: CryptoXpress CF License Agreement - Requires Acrobat Reader, Read the CryptoXpress CF Manual - Requires Acrobat Reader, Download the CryptoXpress CF V9.0 evaluation on to your computer - Expires After 30 Days
Operating System for Deployment: Windows XP, Windows Server 2003, Windows 2000, Sun Solaris 10, Sun Solaris 8, IBM AIX 5.x, Red Hat Enterprise Linux 4.x, SUSE Linux 9.x
Architecture of Product: 32Bit
Product Type: Component
Component Type: Java Class
Compatible Containers: IBM VisualAge for Java 3
Keywords: Encryption Encrypt Encoding encode encodes decryption Decrypt decrypting cypher Professional Partner AES TripleDES 3DES encryption digests lite light
Quick Links
