public class KeyInSessionSunJceCryptFactory extends Object implements ICryptFactory
SunJceCrypt
instances based on http session-specific
encryption key. This allows each user to have their own encryption key, hardening against CSRF
attacks.
Note that the use of this crypt factory will result in an immediate creation of a http sessionConstructor and Description |
---|
KeyInSessionSunJceCryptFactory() |
public ICrypt newCrypt()
newCrypt
in interface ICryptFactory
Copyright © 2006–2014 Apache Software Foundation. All rights reserved.