I have a spring boot application that stores certain passwords which are used by another application(App2) to get connections to databases.
I want to encrypt these passwords such that they can be decoded in App2 if a key is available. What's the best way to go about it?
BCrypt does not serve my purpose as I also need to decode the data
You can use AES Encryption Algorithm , here example on encryption and decryption in java :
private static final String ALGO = "AES";
private static final byte[] keyValue = new byte[] { 'T', 'E', 'S', 'T' };
/**
* Encrypt a string using AES encryption algorithm.
*
* @param pwd the password to be encrypted
* @return the encrypted string
*/
public static String encrypt(String pwd) {
String encodedPwd = "";
try {
Key key = generateKey();
Cipher c = Cipher.getInstance(ALGO);
c.init(Cipher.ENCRYPT_MODE, key);
byte[] encVal = c.doFinal(pwd.getBytes());
encodedPwd = Base64.getEncoder().encodeToString(encVal);
} catch (Exception e) {
e.printStackTrace();
}
return encodedPwd;
}
/**
* Decrypt a string with AES encryption algorithm.
*
* @param encryptedData the data to be decrypted
* @return the decrypted string
*/
public static String decrypt(String encryptedData) {
String decodedPWD = "";
try {
Key key = generateKey();
Cipher c = Cipher.getInstance(ALGO);
c.init(Cipher.DECRYPT_MODE, key);
byte[] decordedValue = Base64.getDecoder().decode(encryptedData);
byte[] decValue = c.doFinal(decordedValue);
decodedPWD = new String(decValue);
} catch (Exception e) {
}
return decodedPWD;
}
/**
* Generate a new encryption key.
*/
private static Key generateKey() {
SecretKeySpec key = new SecretKeySpec(keyValue, ALGO);
return key;
}
let's test the example in main method
public static void main(String[]args) {
System.out.println(encrypt("password"));
System.out.println(decrypt(encrypt("password")));
}
the result :
LGB7fIm4PtaRA0L0URK4RA==
password
Use a TextEncryptor as you are already using Spring. The password and salt that you use when you create one represent your secret:
Encryptors.text("password", "salt");
