Summary

The JCA is more a state of mind than a concrete set of classes. Most importantly, it separates cryptographic concepts from their implementations. The concepts are represented by the classes in the java.security and javax.crypto packages, while implementations are supplied by cryptographic providers. Using cryptography in a Java program is wonderfully simple. Because the API exposes concepts, rather than implementation details, it’s easy to change the algorithms or providers that your program uses. Under the hood, there’s a more complicated picture, but you won’t have to worry about this unless you want to do something tricky, like develop your own provider.

Get Java Cryptography now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.