使用Jasypt通过PBKDF2WithHmacSHA1密钥进行基于密码的AES加密 [英] Using Jasypt for password based AES encryption with PBKDF2WithHmacSHA1 key

问题描述

我正在实现一种工作的加密机制，安全人员的要求如下：

I'm implementing an encryption mechanism where I work, and the security guy's demands are as follows:

1. 创建256位密钥


2. 应使用SecureRandom.getInstance（ SHA1PRNG）;


3. 加密来生成盐

我正在尝试使用Jasypt的 StandardPBEStringEncryptor 类

I'm trying to use Jasypt's StandardPBEStringEncryptor class

encryptor.setPassword(PASSWORD);
encryptor.setAlgorithm("AES/CBC/PKCS5Padding");
encryptor.setKeyObtentionIterations(20000);
encryptor.setSaltGenerator(new RandomSaltGenerator());
encryptor.encrypt("something");

执行此操作时，出现以下异常：

When I do this I get the following exception:

java.security.NoSuchAlgorithmException：AES / CBC / PKCS5Padding SecretKeyFactory不可用

java.security.NoSuchAlgorithmException: AES/CBC/PKCS5Padding SecretKeyFactory not available

我错误地使用Jasypt？我在这里想念什么？

Am I using Jasypt incorrectly? What am I missing here?

谢谢

推荐答案

我结束了请联系Jasypt的首席程序员DanielFernández和他的答案：

I ended up contacting Daniel Fernández who is Jasypt's lead programmer and his answer:

恐怕Jasypt无法提供一种方法来指定SecretKeyFactory和密码本身的实例化。抱歉。

I’m afraid Jasypt does not offer a way to specify different algorithms for the SecretKeyFactory and the instantiation of the Cipher itself. Sorry.

我使用了这段Java代码来执行此操作（没有Jasypt）：

I used this bit of java code for doing this (Without Jasypt):

public String encrypt(final String message) {
  final byte[] salt = generateSalt();
  final Key key = createKey(salt);

  final Cipher encryptingCipher = createCipher(Cipher.ENCRYPT_MODE, key, salt);
  final byte[] messageBytes = message.getBytes(StandardCharsets.UTF_8);
  final byte[] encryptedBytes = doFinal(encryptingCipher, messageBytes);
  final byte[] data = ArrayUtils.addAll(salt, encryptedBytes);
  return BaseEncoding.base64().encode(data);
}

private byte[] generateSalt() {
  final SecureRandom secureRandom = new SecureRandom();
  final byte[] salt = new byte[SALT_LENGTH];
  secureRandom.nextBytes(salt);
  return salt;
}

private Key createKey(final byte[] salt) {
  final PBEKeySpec spec = new PBEKeySpec(PASSWORD,
                                       salt,
                                       ITERATIONS,
                                       KEY_LENGTH);
  final SecretKey secretKey;
  try {
    secretKey = keyFactory.generateSecret(spec);
  } catch (final InvalidKeySpecException e) {
    throw new RuntimeException("Error creating SecretKey", e);
  }
  final SecretKeySpec result = new SecretKeySpec(secretKey.getEncoded(), ALGORITHM);
  spec.clearPassword();
  return result;
}

这篇关于使用Jasypt通过PBKDF2WithHmacSHA1密钥进行基于密码的AES加密的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！