Revision history

Important note: 1.0 RC needs BouncyCastle JCE provider version 1.21 or higher

Important note: beta 9 needs BouncyCastle JCE provider version 1.18 or higher

Add form digest tag for preventing unauthorized URL/Form variable manipulation
Refactored code and code cleanup:
- Import cleanup
- Removed redundant castings
- Removed unused declarations & methods
- Package restructuring
Uses Ant for building/rebuilding
FIX: removed deprecated "DERConstructedSequence" method
FIX: result printing does now work when tag body content is empty

Important note: read this before upgrading!

The symmetric keystore is now passphrase-secured & encrypted with Twofish.
Set optional random seeds for symmetric key generation & PBE
Add support for RC4 stream cipher (for file encryption)
Clear sensitive information (passwords, clear text, keys, ...) from memory after usage (check FAQ here and here)
Tag reference available in printable PDF, Windows Help & plain HTML format
FIX: using StringBuffer instead of String for storing sensitive information (passwords, clear text) (check FAQ here, here and here)
FIX: PBE salts are now random and stored within the encrypted string/file
FIX: IV (initialization vectors) are now stored within the encrypted string/file instead of the symmetric key.
FIX: default scope is now set correctly (= PAGE)

Generating X.509 certificates from PKCS#10 (IE and other) and Netscape requests. The corresponding 0.4 sample application contains sample pages for certificate enrollment (Internet Explorer, Netscape, Mozilla and manual enrollment for server-based systems).
ReadP12 tag for retrieving certificates out of a PKCS#12 keystore.
PEMtoDER tag to convert a PEM string to a DER string.

Added HMAC (message authentication codes) generation of string and files
Added SIG (signature) generation/verification of strings and files
Added public/private key encryption of strings (X.509 certificates)
Changed most of the tag attribute "Runtime Expression Evaluation" parameter to "TRUE"