如何使用Java中的BouncyCastle API对密码进行加密和加盐？

Z时代
2024-01-10
分类：问答

我对 密码学还很陌生 ，我正在使用它BouncyCasetle API来加密密码并将其存储在数据库中。对于 加密，

我正在使用SHA-1算法，并且希望对密码加盐以防止再次发生字典攻击。

任何帮助，将不胜感激。

回答：

我建议为此使用基于密码的密钥派生函数，而不是基本的哈希函数。像这样：

// tuning parameters
// these sizes are relatively arbitrary
int seedBytes = 20;
int hashBytes = 20;
// increase iterations as high as your performance can tolerate
// since this increases computational cost of password guessing
// which should help security
int iterations = 1000;
// to save a new password:
SecureRandom rng = new SecureRandom();
byte[] salt = rng.generateSeed(seedBytes);
Pkcs5S2ParametersGenerator kdf = new Pkcs5S2ParametersGenerator();
kdf.init(passwordToSave.getBytes("UTF-8"), salt, iterations);
byte[] hash =
    ((KeyParameter) kdf.generateDerivedMacParameters(8*hashBytes)).getKey();
// now save salt and hash
// to check a password, given the known previous salt and hash:
kdf = new Pkcs5S2ParametersGenerator();
kdf.init(passwordToCheck.getBytes("UTF-8"), salt, iterations);
byte[] hashToCheck =
    ((KeyParameter) kdf.generateDerivedMacParameters(8*hashBytes)).getKey();
// if the bytes of hashToCheck don't match the bytes of hash
// that means the password is invalid