org.exoplatform.web.security.hash

Interface SaltedHashService

All Known Implementing Classes:

JCASaltedHashService, NoSaltedHashService

public interface SaltedHashService

Interface for creating salted hashes from plaintext passwords and for validating passwords against stored salted hashes.

Author:

Peter Palaga

Method Summary

Methods

Modifier and Type	Method and Description
String	getSaltedHash(String password) Computes a salted hash of given plaintext password suitable for storing in a database.
boolean	validate(String password, String saltedHash) Checks whether given plaintext password corresponds to the given saltedHash.

Method Detail

getSaltedHash

String getSaltedHash(String password)
                     throws SaltedHashException

Computes a salted hash of given plaintext password suitable for storing in a database.

Throws:

SaltedHashException

validate

boolean validate(String password,
               String saltedHash)
                 throws SaltedHashException

Checks whether given plaintext password corresponds to the given saltedHash.

Parameters:

password -

saltedHash -

Returns:

true if the given password matches the given saltedHash; false otherwise.

Throws:

SaltedHashException - if the saltedHash cannot be parsed or if the hashing algorithm is not available.