public class KeyInSessionSunJceCryptFactory extends Object implements ICryptFactory
SunJceCrypt
instances based on http session-specific
encryption key. This allows each user to have their own encryption key, hardening against CSRF
attacks.
Note that the use of this crypt factory will result in an immediate creation of a http sessionConstructor and Description |
---|
KeyInSessionSunJceCryptFactory()
Constructor using
Cipher "PBEWithMD5AndDES" |
KeyInSessionSunJceCryptFactory(String cryptMethod)
Constructor that uses a custom
Cipher |
public KeyInSessionSunJceCryptFactory()
Cipher
"PBEWithMD5AndDES"public ICrypt newCrypt()
newCrypt
in interface ICryptFactory
Copyright © 2006–2016 Apache Software Foundation. All rights reserved.