ai.grakn.engine.user

Class Password

java.lang.Object

ai.grakn.engine.user.Password

public class Password
extends Object

A helper class for generating secure passwords based on random salts The algorithm used is PBKDF2WithHmacSHA1 recommended by NIST . The hashed value has 256 bits.

Author:

fppt

Method Summary

Modifier and Type	Method and Description
static byte[]	getBytes(String string)
static byte[]	getNextSalt(GraknGraph graph) Returns a random salt to be used to hash a password.
static String	getString(byte[] bytes)
static byte[]	hash(char[] password, byte[] salt) Returns a salted and hashed password using the provided hash. Note - side effect: the password is destroyed (the char[] is filled with zeros)
static boolean	isExpectedPassword(char[] password, byte[] salt, byte[] expectedHash) Returns true if the given password and salt match the hashed value, false otherwise. Note - side effect: the password is destroyed (the char[] is filled with zeros)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getNextSalt

public static byte[] getNextSalt(GraknGraph graph)

Returns a random salt to be used to hash a password.

Returns:

a 16 bytes random salt

hash

public static byte[] hash(char[] password,
                          byte[] salt)

Returns a salted and hashed password using the provided hash.
Note - side effect: the password is destroyed (the char[] is filled with zeros)

Parameters:

password - the password to be hashed

salt - a 16 bytes salt, ideally obtained with the getNextSalt method

Returns:

the hashed password with a pinch of salt

isExpectedPassword

public static boolean isExpectedPassword(char[] password,
                                         byte[] salt,
                                         byte[] expectedHash)

Returns true if the given password and salt match the hashed value, false otherwise.
Note - side effect: the password is destroyed (the char[] is filled with zeros)

Parameters:

password - the password to check

salt - the salt used to hash the password

expectedHash - the expected hashed value of the password

Returns:

true if the given password and salt match the hashed value, false otherwise

getString

public static String getString(byte[] bytes)

getBytes

public static byte[] getBytes(String string)