com.aspc.password.impl

Class PBKDF2WithHmacSHA512PasswordHandler

java.lang.Object

com.aspc.password.impl.PBKDF2WithHmacSHA512PasswordHandler

All Implemented Interfaces:

PasswordHandler

public class PBKDF2WithHmacSHA512PasswordHandler
extends java.lang.Object
implements PasswordHandler

A salted & PBKDF2 hash of the password with a large number (1234) of iterations. The resulting hash is stored in as encrypted value.

Advantages:-

• Very hard to brute force crack due the the large memory requirements of the PBKDF2 algorithm and the large number of iterations of hashing.
• Can NOT find matching passwords due to the random salt.
• Can NOT decrypt the value of the hash without access to the encryption keys in the separate master database.
• Can NOT use rainbow tables to decode the hashes due to the use of random salt values.

Risks:-

• The actual password value can NOT be retrieved/used in anyway.

References:-

• https://en.wikipedia.org/wiki/PBKDF2
• Algorithm used PBKDF2WithHmacSHA512
• OWASP Example

Since:

13 January 2016

Author:

Nigel Leck

Constructor Summary

Constructors

Constructor and Description
PBKDF2WithHmacSHA512PasswordHandler()

Method Summary

Modifier and Type	Method and Description
boolean	isHashed() Is the password value hashed ? If so we can display it.
boolean	passwordValid(PasswordRecord login, java.lang.String password) Is the password correct ?
void	passwordWrite(PasswordRecord login, java.lang.String password) Store the password in the encoded form.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PBKDF2WithHmacSHA512PasswordHandler

public PBKDF2WithHmacSHA512PasswordHandler()

Method Detail

passwordValid

public boolean passwordValid(@Nonnull
                             PasswordRecord login,
                             @Nullable
                             java.lang.String password)

Is the password correct ?

Specified by:

passwordValid in interface PasswordHandler

Parameters:

login - the stored password record to check

password - the password to check

Returns:

true if match

passwordWrite

public void passwordWrite(@Nonnull
                          PasswordRecord login,
                          @Nonnull
                          java.lang.String password)
                   throws java.lang.Exception

Store the password in the encoded form.

Specified by:

passwordWrite in interface PasswordHandler

Parameters:

login - the password record.

password - the password to encode and store.

Throws:

java.lang.Exception - a serious problem.

isHashed

public boolean isHashed()

Description copied from interface: PasswordHandler

Is the password value hashed ? If so we can display it.

Specified by:

isHashed in interface PasswordHandler

Returns:

true if hashed.