I want to develop a small OpenPGP client and I'm searching for a Java library for OpenPGP.
Are there any (open source) recommendations for this approach?
Cryptix.org does not seem alive anymore...
I found the BouncyCastle library, for Java and C#. I haven't any experiences with it. I will try it and report here.
It provides:
- A lightweight cryptography API for Java and C#.
- A provider for the Java Cryptography Extension and the Java Cryptography Architecture.
- A clean room implementation of the JCE 1.2.1.
- A library for reading and writing encoded ASN.1 objects.
- A light weight client-side TLS API.
- Generators for Version 1 and Version 3 X.509 certificates, Version 2 CRLs, and PKCS12 files.
- Generators for Version 2 X.509 attribute certificates.
- Generators/Processors for S/MIME and CMS (PKCS7/RFC 3852).
- Generators/Processors for OCSP (RFC 2560).
- Generators/Processors for TSP (RFC 3161).
- Generators/Processors for OpenPGP (RFC 4880).
- A signed jar version suitable for JDK 1.4-1.6 and the Sun JCE.
(from BouncyCastle.org)
There is a commercial library on top of BouncyCastle: http://www.didisoft.com/ which greatly simplifies the BouncyCastle API.
I have not tried it just found it mentioned on jGuru.
I think it's safe to go with BouncyCastle alone. Their library is under development and they provider openpgp examples...
Just for completeness: our SecureBlackbox (Java edition) includes OpenPGP components for Java and Android, much richer than in BouncyCastle, and with support, samples and documentation.
There's PGPJava, but it's pretty old.
来源：https://stackoverflow.com/questions/556670/recommendations-for-java-openpgp