com.aoindustries.security

Class HashedPassword

java.lang.Object

com.aoindustries.security.HashedPassword

public class HashedPassword
extends Object

A salted, hashed and key stretched password. https://crackstation.net/hashing-security.htm

Author:

AO Industries, Inc.

Field Summary

Fields

Modifier and Type	Field and Description
static int	HASH_BYTES The number of bytes in the hash.
static int	RECOMMENDED_ITERATIONS The recommended number of iterations for typical usage.
static int	SALT_BYTES The number of bytes in the random salt.

Constructor Summary

Constructors

Constructor and Description
HashedPassword(byte[] salt, int iterations, byte[] hash)

Method Summary

Modifier and Type	Method and Description
static byte[]	generateSalt() Generates a random salt of SALT_BYTES bytes in length.
static byte[]	hash(String password, byte[] salt, int iterations) Hash the given password
boolean	matches(String password) Checks if this matches the provided password.
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

SALT_BYTES

public static final int SALT_BYTES

The number of bytes in the random salt.

See Also:

Constant Field Values

HASH_BYTES

public static final int HASH_BYTES

The number of bytes in the hash.

See Also:

Constant Field Values

RECOMMENDED_ITERATIONS

public static final int RECOMMENDED_ITERATIONS

The recommended number of iterations for typical usage.

We may change this value between releases without notice. Only use this value for new password hashes. Always store the iterations with the salt and hash, and use the stored iterations when checking password matches.

See Also:

hash(java.lang.String, byte[], int), Constant Field Values

Constructor Detail

HashedPassword

public HashedPassword(byte[] salt,
                      int iterations,
                      byte[] hash)

Parameters:

salt - The provided parameter is zeroed

iterations -

hash - The provided parameter is zeroed

Method Detail

generateSalt

public static byte[] generateSalt()

Generates a random salt of SALT_BYTES bytes in length.

See Also:

hash(java.lang.String, byte[], int)

hash

public static byte[] hash(String password,
                          byte[] salt,
                          int iterations)

Hash the given password

See Also:

generateSalt(), RECOMMENDED_ITERATIONS

toString

public String toString()

Overrides:

toString in class Object

matches

public boolean matches(String password)

Checks if this matches the provided password. Performs comparisons in length-constant time. https://crackstation.net/hashing-security.htm