Mailing-List: contact derby-user-help@db.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Derby Discussion" <derby-user@db.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
MIME-Version: 1.0
In-Reply-To: <de07811a1001050654v2cc0f84ey41cc6bad57bc9603@mail.gmail.com>
References: <de07811a1001050654v2cc0f84ey41cc6bad57bc9603@mail.gmail.com>
Date: Tue, 5 Jan 2010 09:54:42 -0600
Message-ID: <44ed9df21001050754t1260e24au36483b4efe3600bf@mail.gmail.com>
Subject: Re: Illegal Key Size problem
From: Sai Pullabhotla <sai.pullabhotla@jmethods.com>
To: Derby Discussion <derby-user@db.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

This normally means that you do not have unlimited strength
jurisdiction policy files installed in the JRE you are using. There
are a couple of JAR files that you can download from Sun/JRE vendor
that you need to place in jre/lib/security folder. Without these
policy files you cannot use strong encryption like a 256-bit keys.

Hope this helps.

Regards,
Sai Pullabhotla


On Tue, Jan 5, 2010 at 8:54 AM, George H <george.dma@gmail.com> wrote:
> Hi,
>
> I have a program that uses Derby 10.5.3.0 to create an embedded DB with an
> encryption key.
> I am using Blowfish/CBC/NoPadding with a key size of 256. I have a windows
> XP and a Linux machine. Both have Sun JDK v1.6 u17 and I installed the JCE
> jar files from the sun site.
>
> The problem is that the DB is being created on my linux machine with no
> problems but, on windows it keeps giving me an error of Illegal Key Size. If
> I switch the encryption to DES with 56bit key then it works fine.
>
> I created a sample program in java to test the Blowfish and it works. It
> just seems to be derby that complains of the illegal key size. Is there
> something I am missing here?
>
> Attached to the email is the log file of derby with the stack trace, should
> it be of help to anyone.
> --
> George H
> george.dma@gmail.com
>