Jsp / Java Password Encrypt and Decrypt Example

From Previous post Now in this post I will use Encryption/ Decryption mechanism on password input password field using AES algorithm,

I am just adding UtilsSecure.java class and it has two methods;

1. Encrypt Method encrypt(String strToEncrypt) to encrypt the user given password to cipher text
2. Decrypt Method decrypt(String strToDecrypt) to decrypt the ciper text back to original password content.

Below code shows UtilsSecure.java class file

package com.ajax.example; import javax.crypto.Cipher; import javax.crypto.spec.SecretKeySpec; import org.apache.commons.cli.CommandLine; import org.apache.commons.cli.CommandLineParser; import org.apache.commons.cli.HelpFormatter; import org.apache.commons.cli.Option; import org.apache.commons.cli.Options; import org.apache.commons.cli.PosixParser; import org.apache.commons.codec.binary.Base64; import org.apache.commons.logging.Log; import org.apache.commons.logging.LogFactory; public class UtilsSecure { static Log log = LogFactory.getLog(UtilsSecure.class); private static byte[] key = { 0x74, 0x68, 0x69, 0x73, 0x49, 0x73, 0x41, 0x53, 0x65, 0x63, 0x72, 0x65, 0x74, 0x4b, 0x65, 0x79 };//"thisIsASecretKey"; public static String encrypt(String strToEncrypt) { try { Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding"); final SecretKeySpec secretKey = new SecretKeySpec(key, "AES"); cipher.init(Cipher.ENCRYPT_MODE, secretKey); final String encryptedString = Base64.encodeBase64String(cipher.doFinal(strToEncrypt.getBytes())); return encryptedString; } catch (Exception e) { log.error("Error while encrypting", e); } return null; } public static String decrypt(String strToDecrypt) { try { Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5PADDING"); final SecretKeySpec secretKey = new SecretKeySpec(key, "AES"); cipher.init(Cipher.DECRYPT_MODE, secretKey); final String decryptedString = new String(cipher.doFinal(Base64.decodeBase64(strToDecrypt))); return decryptedString; } catch (Exception e) { log.error("Error while decrypting", e); } return null; } }

From the Java class file you can encrypt the password to cipher text and back to original password using decrypt the cipher text done by this below code snippet. String password= req.getParameter("pwd"); String Encrypted=UtilsSecure.encrypt(password); String Decrypted = UtilsSecure.decrypt(Encrypted); out.println("<br/><br/>First Name = "+fname+"<br/><br/>Last Name = "+lname+"<br/><br/>Email = "+email+"<br/><br/>Password Encrypted = "+Encrypted+"<br/><br/>Password Decrypted = "+Decrypted);

Output