net.krotscheck.kangaroo.authz.common.util

Class PasswordUtil

java.lang.Object

net.krotscheck.kangaroo.authz.common.util.PasswordUtil

public final class PasswordUtil
extends Object

Password hashing and comparison utilities.

Author:

Michael Krotscheck

Method Summary

Modifier and Type	Method and Description
static String	createSalt() Create a new salt using Java's SecureRandom for good entropy.
static String	hash(String password, String salt) Hash a password.
static Boolean	isValid(String password, String salt, String hashed) Test whether a password/salt combination match a hash.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

createSalt

public static String createSalt()

Create a new salt using Java's SecureRandom for good entropy.

Returns:

A 32-byte-sized salt.

hash

public static String hash(String password,
                          String salt)

Hash a password.

Parameters:

password - The password.

salt - The salt.

Returns:

The hash.

isValid

public static Boolean isValid(String password,
                              String salt,
                              String hashed)

Test whether a password/salt combination match a hash.

Parameters:

password - The password.

salt - The salt.

hashed - The hash to compare them against.

Returns:

True if they match, otherwise false.