Security - News

The Version 2.5 S/MIME Freeware Library (SFL) source code and documents are freely available.

The SFL implements the IETF S/MIME v3 RFC 3852 Cryptographic Message Syntax (CMS) and RFC 2634 Enhanced Security Services (ESS) specifications. It implements portions of the RFC 3851 Message Specification, RFC 3850 Certificate Handling, and RFC 3370 CMS Algorithms specifications. When used in conjunction with the Crypto++ freeware library, the SFL implements the RFC 2631 Diffie-Hellman (D-H) Key Agreement Method specification. It has been successfully tested using the Microsoft (MS) Windows 2000/XP, Linux and Sun Solaris 2.8 operating systems. Further enhancements, ports and testing of the SFL are still in process. Further releases of the SFL will be provided as significant capabilities are added.

All source code for the SFL is being provided at no cost and with no financial limitations regarding its use and distribution. Organizations can use the SFL without paying any royalties or licensing fees. BAE Systems is developing the SFL under contract to the U.S. Government. The U.S. Government is furnishing the SFL source code at no cost to the vendor subject to the conditions of the "SMP Public License".

The SFL has been successfully used to sign, verify, encrypt and decrypt CMS/ESS objects using: DSA, E-S D-H, 3DES algorithms provided by the Crypto++ library; RSA suite of algorithms provided by the RSA BSAFE 6.0 Crypto-C and Crypto++ libraries; and Fortezza suite of algorithms provided by the Fortezza Crypto Card. The v2.5 SFL uses the v2.5 Certificate Management Library (CML) and v1.7 Enhanced SNACC (eSNACC) ASN.1 C++ Library to encode/decode objects and certificate path validation. The v2.5 SFL release includes: SFL High-level library; Free (a.k.a. Crypto++) Crypto Token Interface Library (CTIL); BSAFE CTIL; Fortezza CTIL; PKCS #11 CTIL; Microsoft CAPI v2.0 CTIL; test utilities; test drivers; and test data. All CTILs were tested as Dynamically Linked Libraries (DLL) using MS Windows. The Fortezza, BSAFE and Crypto++ CTILs were tested with the respective security libraries as shared objects using Linux and Solaris 2.8.

Autor: JP

Heuristické vyhledání souvisejících článků v archívu NEWS

• S/MIME Freeware Library (SFL)
• Rozd?lení databáze novinek NEWS na dv? samostatné ?ásti - Crypto-News a Crypto-Security
• Vyšel draft IETF S/MIME - S/MIME Version 3.2 Message Specification
• Draft IETF S/MIME - S/MIME Version 3.2 Message Specification
• Draft IETF S/MIME - S/MIME Version 3.2 Message Specification