19.6 NTRU jNeo for Java Toolkit
NTRU PKI algorithms include an encryption algorithm NTRUEncrypt and a signature algorithm NTRUSign, invented and developed by four math professors at Brown University. In my sample programs, NTRU algorithms perform 5 to 30 times faster than other public key algorithms with similar cryptographic strength. NTRU algorithms are published and on their way to becoming IEEE and IETF standards. NTRU patented the algorithms to protect their business interests. NTRU algorithm patents have been licensed by a variety of mobile software, smart card, and DSP (Digital Signal Processor) chip vendors, including Sony and Texas Instruments.Cryptographic algorithms are scrutinized and improved repeatedly before considered mature and ready for general public adoption. Although NTRU algorithms have been inspected many times by both academic and business worlds, they are still relatively new. Security weaknesses were identified in NTRUEncrypt as late as May 2001. Those weaknesses do not undermine NTRU algorithm fundamentals and have since been fixed. As you should with any critical project, research NTRU security before licensing it.
19.6.1 The jNeo Package
NTRU provides an implementation of its algorithms in a Java package called NTRU jNeo (v2.2) for Java. You must work out an agreement with NTRU before you can evaluate the package. In addition to NTRU public key algorithms, jNeo for Java also includes an implementation of the AES Rijndael symmetric key algorithm. The jNeo package runs on CLDC, CDC, and J2SE platforms. It has a memory footprint of 37 KB without signature key-generation classes, which have a footprint of 35 KB.The jNeo API is simple and easy to use. In fact, it might be too simplistic. For example, the block encryption method requires users to divide plaintext data into blocks themselves.Using jNeo, NTRUEncrypt key pairs can be generated quickly from pass phrases. The same pass phrase always produces the same key pair. For that reason, jNeo does not provide a password-based key store facility. NTRUSign keys, however, are slow to generate and require floating-point support. The jNeo package provides a floating-point emulation class, which can support NTRUSign key generation on a CLDC device. But on-device NTRUSign key pair generation takes a long time to complete. Generating and distributing NTRUSign keys from a server computer is a better approach. Fortunately, a signature key can sign thousands of messages before it needs replacement. |
لطفا منتظر باشید ...
