Marco Platania | ab8cd68 | 2019-03-19 15:22:58 -0400 | [diff] [blame] | 1 | import javax.crypto.Cipher; |
| 2 | import javax.crypto.spec.GCMParameterSpec; |
| 3 | import javax.crypto.spec.SecretKeySpec; |
| 4 | import java.security.GeneralSecurityException; |
| 5 | import java.security.SecureRandom; |
| 6 | import java.util.Arrays; |
| 7 | |
| 8 | public class Crypto { |
| 9 | |
| 10 | private static final String AES = "AES"; |
| 11 | private static final int GCM_TAG_LENGTH = 16; |
| 12 | private static final int GCM_IV_LENGTH = 12; |
| 13 | private static final String AES_GCM_NO_PADDING = "AES/GCM/NoPadding"; |
| 14 | |
| 15 | public static void main(String[] args) { |
| 16 | if(args.length != 2) { |
| 17 | System.out.println("Usage: java Crypto value_to_encrypt key"); |
| 18 | System.out.println("exit(1)"); |
| 19 | System.exit(1); |
| 20 | } |
| 21 | |
| 22 | String value = args[0]; |
| 23 | String key = args[1]; |
| 24 | String encrypted = encryptCloudConfigPassword(value, key); |
| 25 | System.out.println(encrypted); |
| 26 | } |
| 27 | |
| 28 | /** |
| 29 | * encrypt a value and generate a keyfile |
| 30 | * if the keyfile is not found then a new one is created |
| 31 | * |
| 32 | * @throws GeneralSecurityException |
| 33 | */ |
| 34 | public static String encrypt (String value, String keyString) throws GeneralSecurityException { |
| 35 | SecretKeySpec sks = getSecretKeySpec (keyString); |
| 36 | Cipher cipher = Cipher.getInstance(AES_GCM_NO_PADDING); |
| 37 | byte[] initVector = new byte[GCM_IV_LENGTH]; |
| 38 | (new SecureRandom()).nextBytes(initVector); |
| 39 | GCMParameterSpec spec = new GCMParameterSpec(GCM_TAG_LENGTH * java.lang.Byte.SIZE, initVector); |
| 40 | cipher.init(Cipher.ENCRYPT_MODE, sks, spec); |
| 41 | byte[] encoded = value.getBytes(java.nio.charset.StandardCharsets.UTF_8); |
| 42 | byte[] cipherText = new byte[initVector.length + cipher.getOutputSize(encoded.length)]; |
| 43 | System.arraycopy(initVector, 0, cipherText, 0, initVector.length); |
| 44 | cipher.doFinal(encoded, 0, encoded.length, cipherText, initVector.length); |
| 45 | return byteArrayToHexString(cipherText); |
| 46 | } |
| 47 | |
| 48 | public static String encryptCloudConfigPassword(String message, String key) { |
| 49 | try { |
| 50 | return Crypto.encrypt(message, key); |
| 51 | } catch (GeneralSecurityException e) { |
| 52 | return null; |
| 53 | } |
| 54 | } |
| 55 | |
| 56 | private static SecretKeySpec getSecretKeySpec (String keyString) { |
| 57 | byte[] key = hexStringToByteArray (keyString); |
| 58 | return new SecretKeySpec (key, AES); |
| 59 | } |
| 60 | |
| 61 | public static String byteArrayToHexString (byte[] b) { |
| 62 | StringBuilder sb = new StringBuilder(b.length * 2); |
| 63 | for (byte aB : b) { |
| 64 | int v = aB & 0xff; |
| 65 | if (v < 16) { |
| 66 | sb.append('0'); |
| 67 | } |
| 68 | sb.append(Integer.toHexString(v)); |
| 69 | } |
| 70 | return sb.toString ().toUpperCase (); |
| 71 | } |
| 72 | |
| 73 | private static byte[] hexStringToByteArray (String s) { |
| 74 | byte[] b = new byte[s.length () / 2]; |
| 75 | for (int i = 0; i < b.length; i++) { |
| 76 | int index = i * 2; |
| 77 | int v = Integer.parseInt (s.substring (index, index + 2), 16); |
| 78 | b[i] = (byte) v; |
| 79 | } |
| 80 | return b; |
| 81 | } |
| 82 | } |