apache/cloudstack
1
0
Fork 0
mirror of https://github.com/apache/cloudstack.git synced 2025-10-26 08:42:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Don't use dynamic quiried key size as it varies on different JVM implementation and security providers

Browse Source
This commit is contained in:
Kelven Yang 2012-04-20 11:42:15 -07:00
parent 316267f684
commit 102bc1f39f
2 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
console-proxy/src/com/cloud/consoleproxy/ConsoleProxyPasswordBasedEncryptor.java
View File

@ -14,6 +14,7 @@ package com.cloud.consoleproxy;
import java.security.InvalidKeyException; import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException; import java.security.NoSuchAlgorithmException;
import java.util.UUID;
import javax.crypto.BadPaddingException; import javax.crypto.BadPaddingException;
import javax.crypto.Cipher; import javax.crypto.Cipher;
@ -54,7 +55,7 @@ public class ConsoleProxyPasswordBasedEncryptor {
try { try {
Cipher cipher = Cipher.getInstance("DES"); Cipher cipher = Cipher.getInstance("DES");
int maxKeySize = Cipher.getMaxAllowedKeyLength("DES") / 8; int maxKeySize = 8;
SecretKeySpec keySpec = new SecretKeySpec(normalizeKey(password.getBytes(), maxKeySize), "DES"); SecretKeySpec keySpec = new SecretKeySpec(normalizeKey(password.getBytes(), maxKeySize), "DES");
cipher.init(Cipher.ENCRYPT_MODE, keySpec); cipher.init(Cipher.ENCRYPT_MODE, keySpec);
byte[] encryptedBytes = cipher.doFinal(text.getBytes()); byte[] encryptedBytes = cipher.doFinal(text.getBytes());
@ -86,7 +87,7 @@ public class ConsoleProxyPasswordBasedEncryptor {
try { try {
Cipher cipher = Cipher.getInstance("DES"); Cipher cipher = Cipher.getInstance("DES");
int maxKeySize = Cipher.getMaxAllowedKeyLength("DES") / 8; int maxKeySize = 8;
SecretKeySpec keySpec = new SecretKeySpec(normalizeKey(password.getBytes(), maxKeySize), "DES"); SecretKeySpec keySpec = new SecretKeySpec(normalizeKey(password.getBytes(), maxKeySize), "DES");
cipher.init(Cipher.DECRYPT_MODE, keySpec); cipher.init(Cipher.DECRYPT_MODE, keySpec);

4
server/src/com/cloud/servlet/ConsoleProxyPasswordBasedEncryptor.java
View File

@ -36,7 +36,7 @@ public class ConsoleProxyPasswordBasedEncryptor {
try { try {
Cipher cipher = Cipher.getInstance("DES"); Cipher cipher = Cipher.getInstance("DES");
int maxKeySize = Cipher.getMaxAllowedKeyLength("DES") / 8; int maxKeySize = 8;
SecretKeySpec keySpec = new SecretKeySpec(normalizeKey(password.getBytes(), maxKeySize), "DES"); SecretKeySpec keySpec = new SecretKeySpec(normalizeKey(password.getBytes(), maxKeySize), "DES");
cipher.init(Cipher.ENCRYPT_MODE, keySpec); cipher.init(Cipher.ENCRYPT_MODE, keySpec);
byte[] encryptedBytes = cipher.doFinal(text.getBytes()); byte[] encryptedBytes = cipher.doFinal(text.getBytes());
@ -68,7 +68,7 @@ public class ConsoleProxyPasswordBasedEncryptor {
try { try {
Cipher cipher = Cipher.getInstance("DES"); Cipher cipher = Cipher.getInstance("DES");
int maxKeySize = Cipher.getMaxAllowedKeyLength("DES") / 8; int maxKeySize = 8;
SecretKeySpec keySpec = new SecretKeySpec(normalizeKey(password.getBytes(), maxKeySize), "DES"); SecretKeySpec keySpec = new SecretKeySpec(normalizeKey(password.getBytes(), maxKeySize), "DES");
cipher.init(Cipher.DECRYPT_MODE, keySpec); cipher.init(Cipher.DECRYPT_MODE, keySpec);