Package overit.geocall.util.password

Class PBKDF2V2

java.lang.Object

overit.geocall.util.password.PasswordAlgo

overit.geocall.util.password.PBKDF2V2

public class PBKDF2V2
extends PasswordAlgo

Class that manages the PBKDF2 algorithm used to store the password. This implementation follow the guidelines of ACN (Agenzia per la Cybersicurezza Nazionale) that states to use PBKDF2 as algorithm with Hmac SHA512 and 210000 iterations.

Nested Class Summary

Nested classes/interfaces inherited from class overit.geocall.util.password.PasswordAlgo

PasswordAlgo.Type

Field Summary

Fields

Modifier and Type	Field	Description
protected SecretKeyFactory	skf

Fields inherited from class overit.geocall.util.password.PasswordAlgo

ARGON2_BETA, BCRYPT, OPKBDF2, SCRYPT

Constructor Summary

Constructors

Constructor	Description
PBKDF2V2()

Method Summary

Modifier and Type	Method	Description
boolean	check(String password, String stored)	Checks if the stored hashed password corresponds
String	generate(String password)	Generates the hashed password
PasswordAlgo.Type	getType()	Returns the type of algorithm used

Methods inherited from class overit.geocall.util.password.PasswordAlgo

getInstance

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

skf

protected SecretKeyFactory skf

Constructor Details

PBKDF2V2

public PBKDF2V2()

Method Details

generate

public String generate(String password)

Description copied from class: PasswordAlgo

Generates the hashed password

Specified by:

generate in class PasswordAlgo

Parameters:

password - To hash

Returns:

The hashed password

check

public boolean check(String password,
 String stored)

Description copied from class: PasswordAlgo

Checks if the stored hashed password corresponds

Specified by:

check in class PasswordAlgo

Parameters:

password - The password to check

stored - The stored password to check

Returns:

true if the password corresponds to the stored one, false otherwise

getType

public PasswordAlgo.Type getType()

Description copied from class: PasswordAlgo

Returns the type of algorithm used

Specified by:

getType in class PasswordAlgo

Returns:

The type of algorithm used