Top Description Fields Constructors Methods

org.apache.derby.iapi.sql.dictionary

public Class PasswordHasher

Class Inheritance

extends Object

java.lang.Object
org.apache.derby.iapi.sql.dictionary.PasswordHasher

Imports

java.io.UnsupportedEncodingException, java.security.MessageDigest, .NoSuchAlgorithmException, org.apache.derby.shared.common.error.StandardException, org.apache.derby.shared.common.util.ArrayUtil, org.apache.derby.shared.common.sanity.SanityManager, org.apache.derby.iapi.util.StringUtil, org.apache.derby.shared.common.reference.SQLState

This machine performs the hashing of Derby passwords.

Field Summary

Modifier and Type	Field and Description
private int	_iterations
private String	_messageDigestAlgorithm
private byte[]	_salt
private static final String	ENCODING The encoding to use when converting the credentials to a byte array that can be passed to the hash function in the configurable hash scheme.
public static final String	ID_PATTERN_CONFIGURABLE_HASH_SCHEME Pattern that is prefixed to the stored password in the configurable hash authentication scheme.
public static final String	ID_PATTERN_CONFIGURABLE_STRETCHED_SCHEME Pattern that is prefixed to the stored password in the configurable hash authentication scheme if key stretching has been applied.
public static final String	ID_PATTERN_SHA1_SCHEME Pattern that is prefixed to the stored password in the SHA-1 authentication scheme.
private static final char	SEPARATOR_CHAR Character that separates the hash value from the name of the hash algorithm in the stored password generated by the configurable hash authentication scheme.

Constructor Summary

Access	Constructor and Description
public	PasswordHasher(String messageDigestAlgorithm, byte[] salt, int iterations) Construct from pieces.
public	PasswordHasher(String hashingScheme) Construct from a hashed BUILTIN password stored in the PropertyConglomerate or from a SYSUSERS.HASHINGSCHEME column.

Method Summary

Modifier and Type	Method and Description
private StandardException	badMessageDigest(Throwable t)
public String	encodeHashingScheme() Encodes the hashing algorithm in a string suitable for storing in SYSUSERS.HASHINGSCHEME.
private MessageDigest	getEmptyMessageDigest()
public String	hashAndEncode(String userName, String password) Hash a username/password pair and return an encoded representation suitable for storing as a BUILTIN password value in the PropertyConglomerate.
private String	hashAndEncode(String stringDigest)
public String	hashPasswordIntoString(String userName, String password) Produce a hashed password using a plaintext username and password.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

_iterations	back to summary
private int _iterations

_messageDigestAlgorithm	back to summary
private String _messageDigestAlgorithm

_salt	back to summary
private byte[] _salt

ENCODING	back to summary
private static final String ENCODING The encoding to use when converting the credentials to a byte array that can be passed to the hash function in the configurable hash scheme.

ID_PATTERN_CONFIGURABLE_HASH_SCHEME	back to summary
public static final String ID_PATTERN_CONFIGURABLE_HASH_SCHEME Pattern that is prefixed to the stored password in the configurable hash authentication scheme.

ID_PATTERN_CONFIGURABLE_STRETCHED_SCHEME	back to summary
public static final String ID_PATTERN_CONFIGURABLE_STRETCHED_SCHEME Pattern that is prefixed to the stored password in the configurable hash authentication scheme if key stretching has been applied. This scheme extends the configurable hash scheme by adding a random salt and applying the hash function multiple times when generating the hashed token.

ID_PATTERN_SHA1_SCHEME	back to summary
public static final String ID_PATTERN_SHA1_SCHEME Pattern that is prefixed to the stored password in the SHA-1 authentication scheme.

SEPARATOR_CHAR	back to summary
private static final char SEPARATOR_CHAR Character that separates the hash value from the name of the hash algorithm in the stored password generated by the configurable hash authentication scheme.

Constructor Detail

PasswordHasher	back to summary
public PasswordHasher(String messageDigestAlgorithm, byte[] salt, int iterations) Construct from pieces. Used for databases at rev level 10.6 or later.

PasswordHasher	back to summary
public PasswordHasher(String hashingScheme) Construct from a hashed BUILTIN password stored in the PropertyConglomerate or from a SYSUSERS.HASHINGSCHEME column.

Method Detail

badMessageDigest	back to summary
private StandardException badMessageDigest(Throwable t)

encodeHashingScheme	back to summary
public String encodeHashingScheme() Encodes the hashing algorithm in a string suitable for storing in SYSUSERS.HASHINGSCHEME.

getEmptyMessageDigest	back to summary
private MessageDigest getEmptyMessageDigest() throws StandardException

hashAndEncode	back to summary
public String hashAndEncode(String userName, String password) throws StandardException Hash a username/password pair and return an encoded representation suitable for storing as a BUILTIN password value in the PropertyConglomerate.

hashAndEncode	back to summary
private String hashAndEncode(String stringDigest)

hashPasswordIntoString	back to summary
public String hashPasswordIntoString(String userName, String password) throws StandardException Produce a hashed password using a plaintext username and password. Turn it into a printable string.