gov.va.med.lom.javaBroker.util

Class PassphraseCrypto

java.lang.Object

gov.va.med.lom.javaBroker.util.PassphraseCrypto

public class PassphraseCrypto
extends java.lang.Object

An utility class used to encrypt and decrypt passwords. The system store a set of parameters in the web.xml file. Some of these parameters are passwords and should be encrypted to avoid server inspection by non-authorized people. The DES algorithm used here is not a completly safe strategy, but it just add more safety to the configuration file. The more important aspect of the security here designed is to change the salt word before release the software to the server.

this code was based on the one found at The Java Developers Almanac - very thanks to the original author.

See Also:

http://java.sun.com/developer/technicalArticles/Security/JCE/

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	DES Encrypt algorithm
static java.lang.String	PBE_WITH_MD5_AND_DES The key format: password-based encrypt with MD5 and DES.
static java.lang.String	UTF8 Encrytp encoding

Constructor Summary

Constructors

Constructor and Description
PassphraseCrypto()

Method Summary

Methods

Modifier and Type	Method and Description
static java.lang.String	decrypt(java.lang.String encrypted, java.lang.String passPhrase) Create the key Decode base64 to get bytes of the secret word Prepare the parameter to the ciphers Decrypt Decode using utf-8
static java.lang.String	encrypt(java.lang.String plain, java.lang.String passPhrase) Create the key Prepare the parameter to the ciphers Create the ciphers Encode the string into bytes using utf-8 Encrypt Encode bytes to base64 to get a string

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DES

public static final java.lang.String DES

Encrypt algorithm

See Also:

Constant Field Values

UTF8

public static final java.lang.String UTF8

Encrytp encoding

See Also:

Constant Field Values

PBE_WITH_MD5_AND_DES

public static final java.lang.String PBE_WITH_MD5_AND_DES

The key format: password-based encrypt with MD5 and DES.

See Also:

PBEKeySpec, Constant Field Values

Constructor Detail

PassphraseCrypto

public PassphraseCrypto()

Method Detail

encrypt

public static java.lang.String encrypt(java.lang.String plain,
                       java.lang.String passPhrase)
                                throws java.lang.Exception

• Create the key
• Prepare the parameter to the ciphers
• Create the ciphers
• Encode the string into bytes using utf-8
• Encrypt
• Encode bytes to base64 to get a string

Parameters:

plain - The password to be decrypted.

Returns:

a base64 encoded encrypted password

Throws:

java.lang.Exception - a generic exception caused during the decrypt process.

decrypt

public static java.lang.String decrypt(java.lang.String encrypted,
                       java.lang.String passPhrase)
                                throws java.lang.Exception

• Create the key
• Decode base64 to get bytes of the secret word
• Prepare the parameter to the ciphers
• Decrypt
• Decode using utf-8

Parameters:

encrypted - The password to be decrypted.

Returns:

a plain password.

Throws:

java.lang.Exception - a generic exception caused during the decrypt process.