What's new?What is JHBCI?
- 10/04/2003 -- JHBCI v0.0.6 released.
- Now JHBCI works with Suns Java 2 SDK, Standard Edition, v1.4.2 or better. This issue was reported by Jürg Burkhalter. Many thanks!
- 11/16/2002 -- JHBCI v0.0.5 released.
- Now you can access the ISO9796-1 algorithm directly without RIPEMD160 delegation.
- Fix Bug in
de.cscc.crypto.provider.JHBCI
submitted by Matthias Hanelt/PPI. There was the creation of RSA KeyFactory broken.- Fix Bug in
de.cscc.crypto.provider.RSACipherImpl#getKeySize(Key key)
also submitted by Matthias Hanelt/PPI. We did checkthis.key
instead ofkey
.
- 09/01/2002 -- JHBCI v0.0.4 released.
- Security Update for DES Key unwrapping with RSA. Now we check for the right length of an unwrapped DES Key. Thanks to Dr. Ulrich Kühn.
- 06/23/2002 -- JHBCI v0.0.3 released.
- Ludwig Adam detected first bug at all in RSA Signature with ISO9796-1:1991. Thanks Ludwig for real world testing! Now JHBCI works great in Ludwigs HBCI-Server.
- 04/12/2002 -- JHBCI v0.0.2 released.
- Rewriting of Ant Build File
- Central version number management in Ant's
build.xml
in addition with build.properties.- Add private property file for
build.xml
(${user.home}/.jhbci.properties
).- Source should ready for moving from my local CVS to the SourceForge CVS.
- 04/07/2002 -- JHBCI has stand the first Real World Test by Ludwig Adam.
- Ludwig develops a HBCI 2.2 Server in Java for small banks with the JHBCI Crypto Provider.
- His server does correct RDH-Encryption with the following HBCI-Clients:
- DDBAC HBCIPad 2.2023
- Matrica Moneyplex 2001 v. 4.01 Pro
- StarMoney 3.0
- 02/17/2002 -- JHBCI v0.0.1 released.
- Minor Fixes.
- Now build with the new J2SDK v1.4.0 Release from Sun.
- 01/17/2002 -- JHBCI v0.0.0 released.
- This was the first public realease of JHBCI.
What can I do with JHBCI?
- JHBCI is an OpenSource HBCI Toolkit written in Java and released under the GNU Lesser General Public License (LGPL). HBCI (Home Banking Computer Interface) is a standard, released by german banks to make secure bank-transactions over insecure networks like the Internet.
How is the architecture of JHBCI?
- You can use JHBCI to build HBCI like applications that will do Bank transactions. You need at least Suns Java 2 SDK, Standard Edition, v1.4.0 or better.
Where can I get JHBCI? How do I install JHBCI?
- JHBCI consists of two parts:
- JHBCI Provider (JCA/JCE crypto provider) that implements all relevant crypto algorithms, like:
- DES (56 bit), ECB/CBC Mode, ISO10126-2 Padding
- DES Key Generation
- DES Key Conversion
- 2-Key-Triple-DES (112 bit), ECB/CBC Mode, ISO10126-2 Padding
- 2-Key-Triple-DES Key Generation
- 2-Key-Triple-DES Key Conversion
- 3-Key-Triple-DES (168 bit), ECB/CBC Mode, ISO10126-2 Padding
- 3-Key-Triple-DES Key Generation
- 3-Key-Triple-DES Key Conversion
- RSA Key Wrapper for DES-Keys, 2-Key-Triple-DES-Keys and 3-Key-Triple-DES-Keys
- RSA Signature with ISO9796-1:1991 formated RIPEMD160 Hash
- RSA Signature with ISO9796-1:1991 formated message (since 0.0.5)
- RSA KeyPair Generation with strong Primes
- RSA Key Conversion
- RIPEMD-160 Hash Algorithm
- JHBCI Dialog Engine
- Not yet implemented.
How can I help you?
- First you have to download Suns Java 2 SDK, Standard Edition, v1.4.0 or better.
- You need also the JavaTM Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files for Java 2 SDK, Standard Edition, v1.4.0.
- Note: Due to import control restrictions of some countries, the JCE jurisdiction policy files shipped with the J2SDK, v 1.4 allow "strong" but limited cryptography to be used. An "unlimited strength" version of these files indicating no restrictions on cryptographic strengths is available for those living in eligible countries (which is most countries). You can download this version and replace the strong cryptography versions supplied with the J2SDK, v 1.4 with the unlimited ones. You have to put the
local_policy.jar
and theUS_export_policy.jar
to your${java.home}/lib/security
dir. If you don't do this, JHBCI won't work.- To install JHBCI simply put in the
${java.home}/lib/ext
of your Java 2 distribution.- JHBCI comes with a little command line application CryptoTool. You can start it with the following sequence:
java de.cscc.crypto.tools.CryptoTool.
- You should use and test the crypto code to help finding bugs.
- If you want to get involved development, read the code, understand it and contact me at uwe@cscc.de.
- All in all I need sponsoring to keep the project alive and to do further development. So if you are interested in please contact me at uwe@cscc.de.