|
[EDI-L Mailing List Archive Home]
[Message List]
[Reply To This Message]
Re: X12.58
Mike,
I was planning on doing exactly as you suggest -- stripping out the part
that needs to be authenticated by the MAC, calculating the MAC, and
slapping the data together again. The problem is how to calculate the MAC.
The algorithm looks hairy. I figured someone else must have tried this
before me.
Mark
Mike Rawlins
<mike@rawlinsecconsu To:
lting.com> cc:
Subject: Re: [EDI-L] X12.58
12/11/01 04:34 PM
Please respond to
mike
I don't have a current copy of X12.58 handy, but my hunch is that it
wouldn't work.
Most general purpose encryption/authentication/signature packages operate
on complete
files. X12.58 operates on *part* of the file. If I remember correctly,
you can have
your encryption/authentication cover transaction sets within a group, or
groups within
the interchange. So, the scope of what you are doing is only part of the
file and not
the complete file. I think you're always going to exclude the ISA and IEA
since they
will be in the clear to send through a VAN.
If you really needed to get by cheaply you could try stripping out the part
you want
to have covered by the MAC, hand code the security segments, and then stick
them all
back inside the ISA/IEA. I wouldn't recommend it though.
wrote:
> Folks,
>
> We have a single EDI partner, a bank, that wants us to implement a simple
> form of the X12.58 (version 3040) standard -- MAC authentication only, no
> encryption.
>
> We're not too excited about buying a big, expensive package to do X12.58
on
> a few interchanges per week to one partner.
>
> I found this Java package on the net which seems to offer a free
> cryptographic API implemented in Java:
> http://www.bouncycastle.org/index.html
>
> In the API documentation, their API does seem to support creating MAC
> digests ( CBCBlockCipherMac() ). The implementation looks very similar
to
> the way Java generates signatures for applets, for example.
>
> Has anyone ever tried something like this? Would it work?
>
> Mark
>
>
> To unsubscribe from this group, send an email to:
>
> Message Identifiers: <SALES>, <JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>,
<OFF-TOPIC>
> Access the list online at: http://groups.yahoo.com/group/EDI-L
>
>
> Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
--
Michael C. Rawlins, Rawlins EC Consulting
www.rawlinsecconsulting.com
To unsubscribe from this group, send an email to:
Message Identifiers: <SALES>, <JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>,
<OFF-TOPIC>
Access the list online at: http://groups.yahoo.com/group/EDI-L
Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
|
 |
Subscribe in XML format
| RSS 2.0 |
|
| Atom 0.3 |
|
|
Cart
