JCE and Hardware Acceleration/Smartcard Support

Use of JCE

The Java™ Cryptography Extension (JCE) is a set of packages that provides a framework and implementations for encryption, key generation and key agreement, and Message Authentication Code (MAC) algorithms.

The IBMJSSE2 provider supports PKCS#11 through the IBMPKCS11Impl provider. This allowed the IBMJSSE2 provider to be able to use hardware cryptographic accelerators and to use Smartcards as keystores for greater flexibility in key and trust management. In order to be compatible with Oracle's PKCS#11 support, a configuration file is required. This configuration file is specific to each hardware device and JSSEs usage. See the IBMPKCS11Impl Provider for the sample configuration files.