atg.security

Class SaltedMD5PasswordHasher

java.lang.Object

atg.security.PasswordHasher2Adapter

atg.security.SaltedMD5PasswordHasher

All Implemented Interfaces:

PasswordHasher, PasswordHasher2, java.io.Serializable

public class SaltedMD5PasswordHasher
extends PasswordHasher2Adapter

An implementation of a password hasher using the MD5 digest algorithm with the user login being used as a salt.

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	CLASS_VERSION

Constructor Summary

Constructors

Constructor and Description
SaltedMD5PasswordHasher() Construct a new SaltedMD5PasswordHasher with a randomized initial state.
SaltedMD5PasswordHasher(java.lang.Long pInitialHashState) Construct a new SaltedMD5PasswordHasher with the given initial state.

Method Summary

Modifier and Type	Method and Description
boolean	checkPassword(java.lang.String pLogin, java.lang.String pLoginPassword, java.lang.String pEncryptedPassword, java.lang.Object pHashKey) Returns true if the login password matches the encrypted password.
java.lang.String	encryptPassword(java.lang.String pLogin, java.lang.String pPassword) Encrypts a password suitably for long-term storage.
java.lang.String	generateSalt() Should be implemented by subclasses to generate password salt.
PasswordHasher	getLoginPasswordHasher() Returns a password hasher instance useful for performing a login.
java.lang.Object	getPasswordHashKey() Returns the hash key (if any) that was used for hashing the password for login.
java.lang.String	hashPasswordForLogin(java.lang.String pLogin, java.lang.String pPassword) Performs the appropriate hashing function for a login process.

Methods inherited from class atg.security.PasswordHasher2Adapter

checkPassword, encryptPassword, getPwdHasherComponentPath, hashPasswordForLogin, setPwdHasherComponentPath

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CLASS_VERSION

public static java.lang.String CLASS_VERSION

Constructor Detail

SaltedMD5PasswordHasher

public SaltedMD5PasswordHasher()

Construct a new SaltedMD5PasswordHasher with a randomized initial state.

SaltedMD5PasswordHasher

public SaltedMD5PasswordHasher(java.lang.Long pInitialHashState)

Construct a new SaltedMD5PasswordHasher with the given initial state.

Method Detail

getPasswordHashKey

public java.lang.Object getPasswordHashKey()

Returns the hash key (if any) that was used for hashing the password for login. This must be passed to checkPassword() to verify the validity of the hash.

getLoginPasswordHasher

public PasswordHasher getLoginPasswordHasher()

Returns a password hasher instance useful for performing a login. This instance may have a unique password hash key so that each login attempt is hashed differently.

encryptPassword

public java.lang.String encryptPassword(java.lang.String pLogin,
                                        java.lang.String pPassword)

Encrypts a password suitably for long-term storage.

checkPassword

public boolean checkPassword(java.lang.String pLogin,
                             java.lang.String pLoginPassword,
                             java.lang.String pEncryptedPassword,
                             java.lang.Object pHashKey)

Returns true if the login password matches the encrypted password.

hashPasswordForLogin

public java.lang.String hashPasswordForLogin(java.lang.String pLogin,
                                             java.lang.String pPassword)

Performs the appropriate hashing function for a login process. This value will later be passed to checkPassword().

generateSalt

public java.lang.String generateSalt()

Description copied from class: PasswordHasher2Adapter

Should be implemented by subclasses to generate password salt.

Specified by:

generateSalt in class PasswordHasher2Adapter

Returns:

The salt string.