DevGex Search

This article explores how to use symmetric key cryptography in Java with a fixed key for encrypting and decrypting data, particularly useful for storing encrypted passwords. It covers the use of javax.crypto library, SecretKeyFactory, and provides a practical example using Triple DES.

This paper provides an in-depth analysis of the common BadPaddingException in Java cryptography, focusing on the 'Given final block not properly padded' error in DES encryption algorithms. Through detailed code examples and theoretical analysis, it explains the working mechanism of PKCS5 padding, the failure mechanism of padding verification caused by wrong keys, and provides a complete improvement scheme from password generation to encryption mode selection. The article also discusses security considerations in modern encryption practices, including the use of key derivation functions, encryption mode selection, and algorithm upgrade recommendations.

This paper provides an in-depth exploration of the common javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure error in Java applications. By analyzing the root cause, it identifies that the issue often stems from Java's encryption strength limitations, particularly when handling 256-bit encryption. The article details solutions for different Java versions (Java 6, 7, 8), including adding the BouncyCastle provider or installing Java Cryptography Extension (JCE) unlimited strength jurisdiction policy files. Additionally, it offers code examples and configuration steps to help developers resolve SSL/TLS handshake failures fundamentally, ensuring secure communication in applications.

This article provides a detailed guide on implementing Triple DES (3DES) encryption and decryption in Java. Based on real-world Q&A data, it highlights common errors such as improper byte array handling and presents a corrected code snippet. The content covers encryption principles, Java cryptography APIs, and best practices for secure implementation.

This article provides an in-depth analysis of the root causes behind initial byte corruption during Java AES/CBC encryption and decryption processes. It systematically explains the correct usage of initialization vectors (IV), key generation, data stream handling, and offers complete working code examples to help developers resolve AES/CBC decryption anomalies effectively.

This article provides an in-depth exploration of converting SecretKey objects to strings for database storage and recovering original keys from strings in Java. It focuses on standard Base64 encoding methods for key serialization, analyzes implementation differences across Java versions, and demonstrates complete code examples for AES key generation, encoding, storage, and decoding. The discussion extends to best practices in key management and security considerations, offering developers reliable solutions for cryptographic key storage.

This paper provides an in-depth analysis of the common Invalid AES key length error in Java encryption, explaining the fundamental differences between keys and passwords, introducing the implementation principles of PBKDF2 key derivation algorithm, and demonstrating proper AES key generation through complete code examples. The article also discusses encryption mode selection, initialization vector usage, and other security best practices to help developers build more secure encryption systems.

This article delves into secure password hashing methods in Java, focusing on the principles and implementation of the PBKDF2 algorithm. By analyzing the best-practice answer, it explains in detail how to use salt, iteration counts to enhance password security, and provides a complete utility class. It also discusses common pitfalls in password storage, performance considerations, and how to verify passwords in real-world applications, offering comprehensive guidance from theory to practice.

This paper comprehensively explores various methods for writing byte arrays to files in Java, with a focus on the IOUtils.write method from Apache Commons IO as the best practice. It begins by introducing traditional FileOutputStream and Java NIO Files.write approaches, then delves into the implementation principles, performance advantages, and use cases of IOUtils.write, illustrated through a complete AES key generation code example. The paper concludes with a comparative analysis of different methods, emphasizing the importance of using high-quality third-party libraries for complex I/O operations.

This paper comprehensively examines the encryption mechanisms and recovery methods for connection passwords in DBeaver database management tool. Addressing scenarios where developers forget database passwords but DBeaver maintains active connections, it systematically analyzes password storage locations and encryption methods across different versions (pre- and post-6.1.3). The article details technical solutions for decrypting passwords through credentials-config.json or .dbeaver-data-sources.xml files, covering JavaScript decryption tools, OpenSSL command-line operations, Java program implementations, and cross-platform (macOS, Linux, Windows) guidelines. It emphasizes security risks and best practices, providing complete technical reference for database administrators and developers.

This article provides a comprehensive guide to encrypting strings in Java for scenarios like 2D barcodes, focusing on AES with GCM mode for security and simplicity. It covers core concepts of symmetric encryption, implementation details, code examples, and best practices to avoid common vulnerabilities, with recommendations for using the Google Tink library.

This article explores how to convert byte arrays to hexadecimal strings in Java while preserving leading zeros. By analyzing multiple implementation methods, it focuses on the most concise and effective solution—using Integer.toHexString() with conditional zero-padding. The core principles of byte processing, bitwise operations, and string building are explained in detail, with comparisons to alternatives like Apache Commons Codec, BigInteger, and JAXB, providing developers with comprehensive technical insights.

This article provides a detailed step-by-step guide on generating keystore and truststore for SSL/TLS mutual authentication using Keytool and OpenSSL tools. It explains the fundamental concepts of keystore and truststore, their roles in secure communication, and demonstrates the configuration process for both server and client sides, including key generation, certificate signing requests, certificate signing, and truststore creation. The article concludes with key insights and best practices to ensure secure client-server communication.

This paper provides an in-depth analysis of implementing direct email sending functionality in Android applications using JavaMail API, bypassing the default system email app. It covers core concepts including SMTP protocol configuration, Gmail authentication mechanisms, and security provider integration, offering complete code implementations and configuration guidelines while addressing modern security requirements and network operation constraints in Android development.

This article provides an in-depth exploration of various methods for initializing byte arrays in Java, with special focus on hexadecimal string to byte array conversion techniques. It details the HexFormat class introduced in Java 17, compares manual conversion implementations for pre-Java 17 versions, and offers performance optimization recommendations along with practical application scenarios. The content also covers fundamental byte array initialization approaches, type conversion considerations, and best practice selections across different Java versions.

This article provides a comprehensive analysis of the 'Illegal key size or default parameters' error in Java cryptography. It examines the root cause stemming from Java's cryptographic strength limitation policies. By comparing behavioral differences between Java 1.6.0.12 and 1.6.0.26 versions, the paper delves into the mechanism of JCE Unlimited Strength Jurisdiction Policy Files and offers complete implementation steps for the solution. The discussion also covers ARCFOUR algorithm characteristics, historical context of key length restriction policies, and compatibility considerations across different Java versions.

This article delves into the common Java exception java.security.NoSuchProviderException, particularly the "No such provider: BC" error when using the BouncyCastle cryptography library. Through analysis of a real code case, it explains the root cause—improper registration or loading of security providers. Key topics include: manual registration of the BouncyCastle provider, configuration via Java security policy files, and differences in environments like standard Java versus Android. Code refactoring examples and best practices are provided to help developers resolve such security configuration issues, ensuring stable encryption functionality.

This paper provides an in-depth examination of the HMAC-SHA256 algorithm in digital signature applications. Through Java code examples, it demonstrates proper implementation methods, analyzes the impact of character encoding choices on signature results, explains the meaning of the 0x prefix in hexadecimal output format, and compares the advantages and disadvantages of different implementation approaches. Combined with HMAC workflows in Postman, it offers cross-platform application references for developers.

This article provides an in-depth analysis of the recommended methods for generating secure random AES keys using the standard Java JDK, focusing on the advantages of the KeyGenerator class over manual byte array generation. It explores key aspects such as security, performance, compatibility, and integration with Hardware Security Modules (HSMs), explaining why relying on JCE provider defaults for randomness is more reliable than explicitly specifying SecureRandom. The importance of explicitly defining key sizes to avoid dependency on provider defaults is emphasized, offering comprehensive and practical guidance for developers through a comparison of different approaches.

This article provides a comprehensive analysis of securely encrypting and decrypting passwords in Java configuration files. By examining Password-Based Encryption (PBE) technology combined with AES/CBC/PKCS5Padding algorithm and PBKDF2 key derivation function, it offers a complete implementation solution. The article thoroughly explains the roles of critical security parameters such as salt, iteration count, and initialization vector, while discussing best practices for key storage and management. Through comparison of encoding versus encryption differences, it emphasizes the importance of multi-layered security controls, providing practical security configuration guidance for developers.