com.helger.security.password.hash

Class PasswordHashCreatorBCrypt

java.lang.Object

com.helger.security.password.hash.AbstractPasswordHashCreator

com.helger.security.password.hash.PasswordHashCreatorBCrypt

All Implemented Interfaces:

IPasswordHashCreator, Serializable

public final class PasswordHashCreatorBCrypt
extends AbstractPasswordHashCreator

The new default implementation of IPasswordHashCreator that requires a salt and uses the BCrypt algorithm.

Author:

Philip Helger

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
static String	ALGORITHM

Constructor Summary

Constructors

Constructor and Description
PasswordHashCreatorBCrypt()

Method Summary

Modifier and Type	Method and Description
String	createPasswordHash(IPasswordSalt aSalt, String sPlainTextPassword) The method to create a message digest hash from a password.
boolean	requiresSalt()

Methods inherited from class com.helger.security.password.hash.AbstractPasswordHashCreator

getAlgorithmName, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

ALGORITHM

public static final String ALGORITHM

See Also:

Constant Field Values

Constructor Detail

PasswordHashCreatorBCrypt

public PasswordHashCreatorBCrypt()

Method Detail

requiresSalt

public boolean requiresSalt()

Returns:

true if this hash creator requires a salt, false if not.

createPasswordHash

@Nonnull
public String createPasswordHash(@Nonnull
                                           IPasswordSalt aSalt,
                                           @Nonnull
                                           String sPlainTextPassword)

The method to create a message digest hash from a password. The password salt must be of type PasswordSaltBCrypt.

Parameters:

aSalt - Optional salt to be used. This parameter is only null for backwards compatibility reasons.

sPlainTextPassword - Plain text password. May not be null.

Returns:

The String representation of the password hash. Must be valid to encode in UTF-8.