Specifying an alternate encryption algorithm

Derby supports the following encryption algorithms.

• DES (the default)
• DESede (also known as triple DES)
• Any encryption algorithm that fulfills the following requirements:
  • It is symmetric
  • It is a block cipher, with a block size of 8 bytes
  • It uses the NoPadding padding scheme
  • Its secret key can be represented as an arbitrary byte array
  • It requires exactly one initialization parameter, an initialization vector of type javax.crypto.spec.IvParameterSpec
  • It can use javax.crypto.spec.SecretKeySpec to represent its key

  For example, the algorithm Blowfish implemented in the Sun JCE package fulfills these requirements.

By Java convention, an encryption algorithm is specified like this:

algorithmName/feedbackMode/padding

The only feedback modes allowed are:

• CBC
• CFB
• ECB
• OFB

By default, Derby uses the DES algorithm of DES/CBC/NoPadding.

Specify an alternate encryption algorithm when you create a database with the encryptionAlgorithm=algorithm attribute. If the algorithm you specify is not supported by the provider you have specified, Derby throws an exception.