JCE requires: java.lang.RuntimePermission requires accessClassInPackage.sun.security.provider

Question

I'm trying to use the JCE with JWS1.0.2. All I want to do is generate a KeyPair and I can NOT use a signed application. The code is:
public static KeyPair genDHKeyPair() throws Exception {
// properties...
DHParameterSpec dhSkipParamSpec;
dhSkipParamSpec = new      DHParameterSpec(skip1024Modulus, skip1024Base);
KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("DH");
keyPairGenerator.initialize(dhSkipParamSpec);
KeyPair keyPair = keyPairGenerator.generateKeyPair();
return keyPair;
I'm using JDK1.4. This code works fine outside of JWS.
If I call this code I get an exception that states I need the stated RuntimePermission. IMHO this is a bug because I should be able to make use of simple standard extension methods like this. Is getting an instance of a KeyPairGenerator and generating a key pair a security risk?
The fix for this should be a simple addition to the security policy for JWS which gives SUN javax.crypto code access to the appropriate RuntimePermission.
Can anyone think of a reason why NOT to do this?
Thank you.
BTW, here's the Exception you would get if you tried this:
java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.provider)
     at java.security.AccessControlContext.checkPermission(AccessControlContext.java:270)
     at java.security.AccessController.checkPermission(AccessController.java:401)
     at java.lang.SecurityManager.checkPermission(SecurityManager.java:542)
     at java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:1513)
     at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:262)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:299)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:262)
     at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:322)
     at com.wss.calendar.client.swing.Main.main(Main.java:47)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at com.sun.javaws.Launcher.executeApplication(Launcher.java:739)
     at com.sun.javaws.Launcher.executeMainClass(Launcher.java:701)
     at com.sun.javaws.Launcher.continueLaunch(Launcher.java:584)
     at com.sun.javaws.Launcher.handleApplicationDesc(Launcher.java:328)
     at com.sun.javaws.Launcher.handleLaunchFile(Launcher.java:166)
     at com.sun.javaws.Launcher.run(Launcher.java:134)
     at java.lang.Thread.run(Thread.java:536)

Answer 1

hi there,
Please I have the same problem in an applet that uses DSA with the following call:
pkey = (PublicKey) new DSAPublicKey(server_pub_key);
The Exception i am having on the console is
java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.provider)
Note that I am NOT using JCE and that both netscape and IE browsers gave this error
Can somebody help me please?
Thanks in advance,
JPDib