I find a bug, what shall i do to improve performance?

Simply open a new ticket and report the debug view information in it.


Why the Open source model?

Simply because free auditable source code make sense, specially in security. It's a warranty for robust and secure code : anyone can audit and patch the code at any moment all around the world.

Also because i'm convinced that the only thing that a client should pay is the service : customizations, new features and support.


Does eParapher provides a PDF Viewer?

It doesn't natively, but you can add third party software JPedal eclipse plugin


Why a heavy client?

Since 2000, everybody does web application. But is it the right choice for a security software?

It can be, if you fully trust :

  • Your web browser
  • Your operating system
  • Your DNS servers
  • The network infrastructure between your client and your web application.
  • The server side infrastructure : web server(s), application server(s) (J2EE, .Net, ...), database server(s), firewalls, ...
  • Administrators work everyday with security in mind (patches, monitoring ...)
  • Application developers work with security in mind (see
  • ...

On a security point of view, that made lots of potential weak points...

So, i decided to implement eParapher as a heavy client, with signed code : it offer a higher security level.


Why this logo?

Well ... I choose this old piece of paper because it's a part of french history [cocorico ;)] : it's one of the most important contract signed in the 18th century.

As eParapher was originally designed to sign contract for small companies...


Technical Questions

Which Java runtime environment (JRE) should i use?

Use a JRE 1.5 or later.

Use Sun JRE 1.6 or later if you want to use:

  • Windows personal certificate store (through SunMSCAPI JCE Provider).
  • XML DSig.


I got a JRE 1.5 or later, but my default JRE is 1.4.2 or sooner, how i start eParapher?

Simply start it with the -vm option :

eParapher -vm "c:\Program Files\Java\jre1.5.0_11\bin"


Does eParapher support hardware tokens, such as USB Tokens or smartcards?

eParapher support USB Token and smartcard through a PKCS#11 interface.

You just need working drivers and the corresponding PKCS#11 file (*.dll or *.so) location for your hardware.

It has been tested with GemPKCS.


What's the issue for the "Key size exception" message?

JRE limit by default the cryptographic engine through by checking the key size, due to different country laws on cryptography.\

The solution is, if your country rights permit it, download and install the "Unlimited Strength Jurisdiction Policy Files" :

  • Sun JRE 1.6 JRE 1.5
  • IBM Unlimited Strength Jurisdiction Policy Files. ;)