Package org.apache.wicket.core.util.crypt

Class KeyInSessionSunJceCryptFactory

java.lang.Object

org.apache.wicket.core.util.crypt.AbstractKeyInSessionCryptFactory<org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory.CryptData>

org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory

All Implemented Interfaces:

ICryptFactory

public class KeyInSessionSunJceCryptFactory
extends AbstractKeyInSessionCryptFactory<org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory.CryptData>

Crypt factory that produces SunJceCrypt instances based on session-specific encryption key. This allows each user to have his own encryption key, hardening against CSRF attacks.
Note that the use of this crypt factory will result in an immediate creation of a session.

Author:

igor.vaynberg

Constructor Summary

Constructors

Constructor	Description
KeyInSessionSunJceCryptFactory()	Constructor using Cipher "PBEWithMD5AndDES"
KeyInSessionSunJceCryptFactory(String cryptMethod)	Constructor that uses a custom Cipher

Method Summary

Modifier and Type	Method	Description
protected ICrypt	createCrypt(org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory.CryptData keyParams)
protected org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory.CryptData	generateKey(Session session)	Generates the secret key for a new crypt.

Methods inherited from class org.apache.wicket.core.util.crypt.AbstractKeyInSessionCryptFactory

newCrypt

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

KeyInSessionSunJceCryptFactory

public KeyInSessionSunJceCryptFactory()

Constructor using Cipher "PBEWithMD5AndDES"

KeyInSessionSunJceCryptFactory

public KeyInSessionSunJceCryptFactory(String cryptMethod)

Constructor that uses a custom Cipher

Parameters:

cryptMethod - the name of the crypt method (cipher)

Method Details

generateKey

protected org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory.CryptData generateKey(Session session)

Description copied from class: AbstractKeyInSessionCryptFactory

Generates the secret key for a new crypt.

Specified by:

generateKey in class AbstractKeyInSessionCryptFactory<org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory.CryptData>

Parameters:

session - the current user session where crypt will be stored

Returns:

the secret key for a new crypt

createCrypt

protected ICrypt createCrypt(org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory.CryptData keyParams)

Specified by:

createCrypt in class AbstractKeyInSessionCryptFactory<org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory.CryptData>

Returns:

the ICrypt to use