Jasypt

From Chorke Wiki
Jump to navigation Jump to search

Jasypt is a java library which allows the developer to add basic encryption capabilities to his/her projects with minimum effort, and without the need of having deep knowledge on how cryptography works.

  • High-security, standards-based encryption techniques, both for unidirectional and bidirectional encryption. Encrypt passwords, texts, numbers, binaries...
  • Transparent integration with Hibernate.
  • Suitable for integration into Spring-based applications and also transparently integrable with Spring Security.
  • Integrated capabilities for encrypting the configuration of applications (i.e. datasources).
  • Specific features for high-performance encryption in multi-processor/multi-core systems.
  • Open API for use with any JCE provider.

Dependencies

<dependency>
    <groupId>org.jasypt</groupId>
    <artifactId>jasypt</artifactId>
    <version>1.9.3</version>
</dependency>
<dependency>
    <groupId>com.github.ulisesbocchio</groupId>
    <artifactId>jasypt-spring-boot</artifactId>
    <version>3.0.3</version>
</dependency>

Encryption

Jasypt

wget https://repo1.maven.org/maven2/org/jasypt/jasypt/1.9.3/jasypt-1.9.3.jar
java -cp jasypt-1.9.3.jar org.jasypt.intf.cli.JasyptPBEStringEncryptionCLI \
ivGeneratorClassName=org.jasypt.iv.RandomIvGenerator \
algorithm=PBEWITHHMACSHA512ANDAES_256 \
password=secret_password \
input=sadaqah!
wget https://repo1.maven.org/maven2/org/jasypt/jasypt/1.9.3/jasypt-1.9.3.jar
java -cp jasypt-1.9.3.jar org.jasypt.intf.cli.JasyptPBEStringDecryptionCLI \
ivGeneratorClassName=org.jasypt.iv.RandomIvGenerator \
algorithm=PBEWITHHMACSHA512ANDAES_256 \
password=secret_password \
input=D5pJ1JQ+v+I+AYS7BARBnOcKQudi2r1g4qgobdOjT8dogcldMvRPPLAVQx3zddS/

wget https://repo1.maven.org/maven2/org/jasypt/jasypt/1.9.3/jasypt-1.9.3.jar
java -cp jasypt-1.9.3.jar org.jasypt.intf.cli.JasyptPBEStringEncryptionCLI \
ivGeneratorClassName=org.jasypt.iv.RandomIvGenerator \
algorithm=PBEWITHHMACSHA1ANDAES_128 \
password=secret_password \
input=sadaqah!
wget https://repo1.maven.org/maven2/org/jasypt/jasypt/1.9.3/jasypt-1.9.3.jar
java -cp jasypt-1.9.3.jar org.jasypt.intf.cli.JasyptPBEStringDecryptionCLI \
ivGeneratorClassName=org.jasypt.iv.RandomIvGenerator \
algorithm=PBEWITHHMACSHA1ANDAES_128 \
password=secret_password \
input=lC6Z9mpaX8iIS9/SEKIQzuEMbxd58pBWBksuARklDHXyspf3Hg1AqyyMWEd9StMa

Apache Camel Jasypt

wget https://cdn.chorke.org/soft/comn/apache/camel/apache-camel-2.15.6.tar.gz;\
tar -xzvf apache-camel-2.15.6.tar.gz; cd apache-camel-2.15.6/lib/;\
java -jar camel-jasypt-2.15.6.jar \
-c encrypt -p secret_password \
-i sadaqah!
wget https://cdn.chorke.org/soft/comn/apache/camel/apache-camel-2.15.6.tar.gz;\
tar -xzvf apache-camel-2.15.6.tar.gz; cd apache-camel-2.15.6/lib/;\
java -jar camel-jasypt-2.15.6.jar \
-c decrypt -p secret_password \
-i BVT6gDNautctO6xPvKrHgU3EAlsbDbnU

wget https://cdn.chorke.org/soft/comn/apache/camel/apache-camel-2.15.6.tar.gz;\
tar -xzvf apache-camel-2.15.6.tar.gz; cd apache-camel-2.15.6/lib/;\
java -jar camel-jasypt-2.15.6.jar \
-c encrypt -a PBEWithMD5AndDES \
-p secret_password \
-i sadaqah!
wget https://cdn.chorke.org/soft/comn/apache/camel/apache-camel-2.15.6.tar.gz;\
tar -xzvf apache-camel-2.15.6.tar.gz; cd apache-camel-2.15.6/lib/;\
java -jar camel-jasypt-2.15.6.jar \
-c decrypt -a PBEWithMD5AndDES \
-p secret_password \
-i YCYR4yln0xh8E5a1XA+GR+ZtLiLsAx41

Playground

mkdir -p ~/Documents/jasypt-playground
cd       ~/Documents/jasypt-playground
sudo apt install openjdk-8-jdk
sudo update-alternatives --config java

wget -cq https://repo1.maven.org/maven2/org/jasypt/jasypt/1.9.3/jasypt-1.9.3.jar\
 -P ~/Documents/jasypt-playground/

alias jasypt_encrypt="$(cat <<EOF
java -cp ${HOME}/Documents/jasypt-playground/jasypt-1.9.3.jar \
org.jasypt.intf.cli.JasyptPBEStringEncryptionCLI \
ivGeneratorClassName=org.jasypt.iv.RandomIvGenerator \
algorithm=PBEWITHHMACSHA512ANDAES_256 \
verbose=false
EOF
)"
alias jasypt_decrypt="$(cat <<EOF
java -cp ${HOME}/Documents/jasypt-playground/jasypt-1.9.3.jar \
org.jasypt.intf.cli.JasyptPBEStringDecryptionCLI \
ivGeneratorClassName=org.jasypt.iv.RandomIvGenerator \
algorithm=PBEWITHHMACSHA512ANDAES_256 \
verbose=false
EOF
)"

jasypt_encrypt password=secret_password\
 input=sadaqah!
jasypt_decrypt password=secret_password\
 input=3afnDdXwer1GW5EjO/SH9/oYIKgBOHO6NapsiuD+l8Wm/zOey20Dis5evl86A5AM

echo "ENC($(jasypt_encrypt password='secret_password' input='sadaqah!'))"
rm -rf ~/Documents/jasypt-playground/jasypt-*

References