Package net.overburn.redfort.keygen

Class PBKDF2KeyGenerator

java.lang.Object

net.overburn.redfort.keygen.PBKDF2KeyGenerator

All Implemented Interfaces:

BasicKeyGenerator, SecretBasedKeyGenerator

public class PBKDF2KeyGenerator
extends Object
implements SecretBasedKeyGenerator

Derives a suitable key from a secret/password, salt, extra secret for keyed hashing. Additional info can be used to tag. Implements SecretBasedKeyGenerator. Use this where mandated by law/guidelines. WARNING: Stick to Argon2KeyGenerator and avoid modifying/implementing this or any implementations without understanding the ramifications. For more info look:

See Also:

• NIST800

Field Summary

Fields inherited from interface net.overburn.redfort.keygen.BasicKeyGenerator

AES, ARGON2, CHACHA20, DEFAULT_KEY_LENGTH, PBKDF2_WITH_HMAC_SHA_512

Constructor Summary

Constructors

Constructor	Description
PBKDF2KeyGenerator()

Method Summary

Modifier and Type	Method	Description
byte[]	derive(char[] secret, byte[] salt, byte[] pepper, byte[] additional)	Derives a suitable key from a secret/password, salt, extra secret for keyed hashing.
SecretKeySpec	generate(char[] secret, byte[] salt, byte[] pepper, byte[] ad)
SecretKeySpec	generate(String secret, String salt)
SecretKeySpec	generate(String secret, String salt, String pepper)
SecretKeySpec	generate(String secret, String salt, String pepper, byte[] ad)
SecretKeySpec	wrap(byte[] rawKey)
SecretKeySpec	wrap(String rawKey)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.overburn.redfort.keygen.BasicKeyGenerator

wrap, wrap

Constructor Details

PBKDF2KeyGenerator

public PBKDF2KeyGenerator()

Method Details

generate

public SecretKeySpec generate(String secret,
 String salt)

Specified by:

generate in interface SecretBasedKeyGenerator

generate

public SecretKeySpec generate(String secret,
 String salt,
 String pepper)

Specified by:

generate in interface SecretBasedKeyGenerator

generate

public SecretKeySpec generate(String secret,
 String salt,
 String pepper,
 byte[] ad)

Specified by:

generate in interface SecretBasedKeyGenerator

generate

public SecretKeySpec generate(char[] secret,
 byte[] salt,
 byte[] pepper,
 byte[] ad)

Specified by:

generate in interface SecretBasedKeyGenerator

derive

public byte[] derive(char[] secret,
 byte[] salt,
 byte[] pepper,
 byte[] additional)

Description copied from interface: SecretBasedKeyGenerator

Derives a suitable key from a secret/password, salt, extra secret for keyed hashing. Additional info can be used to tag.

Specified by:

derive in interface SecretBasedKeyGenerator

Parameters:

secret - secret or password that is supplied by user or server. Take utmost care.

salt - Unique value for each secret that's known only to server for each secret

pepper - Unique value for each secret that's known only to server

additional - Any additional Tag for ID or classification

Returns:

key that can be wrapped and supplied to Scrambler

wrap

public SecretKeySpec wrap(byte[] rawKey)

wrap

public SecretKeySpec wrap(String rawKey)