at.favre.lib.crypto.bkdf

Class PasswordHasher.HashData

java.lang.Object

at.favre.lib.crypto.bkdf.PasswordHasher.HashData

Enclosing interface:

PasswordHasher

public static final class PasswordHasher.HashData
extends Object

+ Model containing all the parts required for the "BKDF Password Hash Message Format"

Field Summary

Fields

Modifier and Type	Field and Description
byte	cost
byte[]	rawHash
byte[]	rawSalt
Version	version

Constructor Summary

Constructors

Constructor and Description
HashData(byte cost, Version version, byte[] rawSalt, byte[] rawHash)

Method Summary

Modifier and Type	Method and Description
boolean	equals(Object o)
byte[]	getAsBlobMessageFormat() Get the "BKDF Password Hash Message Format 1" which is in blob/byte array form
String	getAsEncodedMessageFormat() Get the "BKDF Password Hash Message Format 2" which is a base64-url encoded (rfc4648 "Base 64 Encoding with URL and Filename Safe Alphabet") message containing all information needed to verify a password, including cost factor, version and salt.
int	hashCode()
void	wipe() Wipe the internal byte arrays for security purposes.

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Field Detail

cost

public final byte cost

version

public final Version version

rawSalt

public final byte[] rawSalt

rawHash

public final byte[] rawHash

Constructor Detail

HashData

public HashData(byte cost,
                Version version,
                byte[] rawSalt,
                byte[] rawHash)

Method Detail

getAsBlobMessageFormat

public byte[] getAsBlobMessageFormat()

Get the "BKDF Password Hash Message Format 1" which is in blob/byte array form

Currently this is the following format: V C S S S S S S S S S S S S S S S S H H H H H H H H H H ...

• V: 1 byte version code
• C: 1 byte cost factor
• S: 16 byte salt
• H: 23/24 byte hash

Returns:

message as byte array aka "Format 1"

getAsEncodedMessageFormat

public String getAsEncodedMessageFormat()

Get the "BKDF Password Hash Message Format 2" which is a base64-url encoded (rfc4648 "Base 64 Encoding with URL and Filename Safe Alphabet") message containing all information needed to verify a password, including cost factor, version and salt.

See getAsBlobMessageFormat() for the exact message format.

Returns:

base64-url-safe encoded password hash message aka "Format 2"

wipe

public void wipe()

Wipe the internal byte arrays for security purposes. This instance must not be used after calling this.

equals

public boolean equals(Object o)

Overrides:

equals in class Object

hashCode

public int hashCode()

Overrides:

hashCode in class Object