[kepler-dev] Jacksum package

[Christopher Brooks]

Hi Dan
Looks interesting.  It is GPL'd though.

One idea that is probably overkill would be to use the security actors
to create a signature for the first file and then compare the
signature for the second file.

This could be slow, and requires creating a certificate, but it does
not require yet another jar file.

$PTII/ptolemy/actor/lib/security/demo/Signature/Signature.xml is 
an example of a man in the middle attack, where a message that has
been tampered with has a different signature.

Anyway, the above seems like overkill, but I thought I'd pass it on.

I'm a little surprised there is not a MD5 class in Sun's Java classes.

MessageDigest might be of interest:
http://java.sun.com/j2se/1.5.0/docs/guide/security/CryptoSpec.html#MessageDigest 

_Christopher
--------

    Hi All,
        Does anyone out there have any experience with the Jacksum project 
    (http://www.jonelo.de/java/jacksum/index.html) for computing and 
    verifying checksums, CRCs and message digests (known as hash values and 
    fingerprints). This is java opensource code that I am considering for a 
    file comparison test actor.
    
    Dan
    
    _______________________________________________
    Kepler-dev mailing list
    Kepler-dev at ecoinformatics.org
    http://mercury.nceas.ucsb.edu/ecoinformatics/mailman/listinfo/kepler-dev
--------