[Esapi-user] Announcing planned ESAPI crypto packaging changes

Sun Jan 17 23:52:05 EST 2010

A heads up for anyone using the ESAPI crypto stuff or planning to in the not
too distant future...

After a discussion with Jim Manico, I have decided to reorganize some of the
new crypto-related classes in ESAPI for better long term support.

There will be 2 new packages created and some of the crypto classes that
are new to 2.0 will be moved. The new packages are:

	org.owasp.esapi.crypto
	org.owasp.esapi.reference.crypto

This change will almost certainly will first show up in the 2.0rc5 release
candidate. The changes will be:

	1) Moving CipherText and PlainText classes
		from	org.owasp.esapi
		to	org.owasp.esapi.crypto
	2) Moving CipherSpec and CryptoHelper
		from	org.owasp.esapi.util
		to	org.owasp.esapi.crypto
	3) Moving JavaEncryptor and LegacyJavaEncryptor
		from	org.owasp.esapi.reference
		to	org.owasp.esapi.reference.crypto

The latter will also have some corresponding changes made to the class names
in the ESAPI.properties file.

These changes will allow better long term support and somewhat less cluttered
interfaces (things not yet there, but required for CipherText serialization).

Developers using these classes will have to change their 'import' statements
or use of full-qualified class names.

I apologize for the inconvenience that this may cause, but it will be worth it
in the long run.

-kevin
-- 
Kevin W. Wall
"The most likely way for the world to be destroyed, most experts agree,
is by accident. That's where we come in; we're computer professionals.
We cause accidents."        -- Nathaniel Borenstein, co-creator of MIME