cryptographic engine support on Linux

[ninja123]

Dear All,

Can anybody throw some light on the following things?

I would like to know if provisions for cryptographic algorithms, especially things like digital signature of packages/applications etc are a native feature of any linux package installer/package manager.

Another question is:

Do all linux based systems natively support cryptography? if yes, what engines do they use? Do they all use openssl or do they use high level java based engines like Harmony(Apache) or Bouncy castle?

Can someone clarify?

I have an ubuntu 10.10 and I know openssl support is already provided. However I want to know if any system level program actually uses it or not

Thanks in advance

[Rubberman]

Dear All,

Can anybody throw some light on the following things?

I would like to know if provisions for cryptographic algorithms, especially things like digital signature of packages/applications etc are a native feature of any linux package installer/package manager.

Yes. Most package managers such as Yum, Aptitude, and such use digital signatures (PGP sigs) to sign and verify software packages before they are installed on the system.

Another question is:

Do all linux based systems natively support cryptography? if yes, what engines do they use? Do they all use openssl or do they use high level java based engines like Harmony(Apache) or Bouncy castle?

Can someone clarify?

Yes. A number of major cryptographic engines are built into the kernel by default.

I have an ubuntu 10.10 and I know openssl support is already provided. However I want to know if any system level program actually uses it or not

Thanks in advance

OpenSSL is an installable package. I am not sure if it is installed by default - it should be since a lot of programs will need to use it, but it is easy enough to do so. OpenSSL is used by any program that needs to access SSL-enabled web sites, such as a web browser (Firefox, Chrome, Opera, et al), wget, git, svn, etc.

[GameFrame]

OpenSSL is being used to secure traffic when it's traveling over the internet. If you're looking for local encryption methods such as filesystem, USB stick etc.

loop-aes is is the most secure option in that case. I've been using it since begin (since Jan 2001) when it came to the public.