[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
|
RE: [orbit-dev] JSch 0.1.28 Cryptography warning
|
Thanks a lot, Atsuhiko (is it Morning already in Japan,
or are you just up darn late, or are you travelling?)
-- I think your answer resolves the issue, and everything
is in order.
Along this discussion we learned something about not
deprecating old bundles (so we should probably also
not add too many versions without good reason).
Thanks,
--
Martin Oberhuber, Senior Member of Technical Staff, Wind River
Target Management Project Lead, DSDP PMC Member
http://www.eclipse.org/dsdp/tm
> -----Original Message-----
> From: Atsuhiko Yamanaka [mailto:ymnk@xxxxxxxxxx]
> Sent: Thursday, May 29, 2008 6:53 PM
> To: Oberhuber, Martin
> Cc: orbit-dev@xxxxxxxxxxx
> Subject: Re: [orbit-dev] JSch 0.1.28 Cryptography warning
>
> Hi,
>
> It is the long mail thread and I have not recognized which questions
> I should answer for, yet.
>
> Is it enough to answer the following question?
>
> +-From: "Oberhuber, Martin" <Martin.Oberhuber@xxxxxxxxxxxxx> --
> |_Date: Thu, 29 May 2008 18:18:12 +0200 _______________________
> |
> |Probably the encryption in JSch:
> | com.jcraft.jsch.jcraft.HMAC
> |was indeed added after 0.1.28 -- let's wait for Atsuhiko
> to comment, ok?
>
> Yes, pure Java HMAC implementations have been added since 0.1.30.
>
> Without such implementations, older jsch can run thanks to JCE.
> I, however, found that HMAC included in Sun's JCE have the
> serious bug to
> leek memories on Mac OS X platform. The leeked memories must
> not be freed
> until the termination of JVM. So, if you transfer huge files
> by using sftp,
> Eclipse may crash.
> # Please note that such problem will not occur on Windows and
> GNU/Linux.
>
> This is the reason for the addition of that classes.
>
>
> Sincerely,
> --
> Atsuhiko Yamanaka
> JCraft,Inc.
> 1-14-20 HONCHO AOBA-KU,
> SENDAI, MIYAGI 980-0014 Japan.
> Tel +81-22-723-2150
> +1-415-578-3454
> Fax +81-22-224-8773
> Skype callto://jcraft/
>
