Java ESAPI.encryptor方法代码示例

import org.owasp.esapi.ESAPI; //导入方法依赖的package包/类
private String createEncryptedToken(SecretKey skey) throws EncryptionException {
    StringBuilder sb = new StringBuilder( getUserAccountName() + DELIM);
    // CHECKME: Should we check here to see if token has already expired
    //          and refuse to encrypt it (by throwing exception) if it has???
    //          If so, then updateToken() should also be revisited.
    sb.append( getExpiration() ).append( DELIM );
    sb.append( getQuotedAttributes() );
    
    Encryptor encryptor = ESAPI.encryptor();
    CipherText ct = encryptor.encrypt(skey, new PlainText( sb.toString() ) );
    String b64 =
        ESAPI.encoder().encodeForBase64(ct.asPortableSerializedByteArray(),
                                        false);
    return b64;
}
 

import org.owasp.esapi.ESAPI; //导入方法依赖的package包/类
/**
* Test of hash method, of class org.owasp.esapi.Encryptor.
   *
   * @throws EncryptionException
   */
  public void testHash() throws EncryptionException {
      System.out.println("testHash()");
      Encryptor instance = ESAPI.encryptor();
      String hash1 = instance.hash("test1", "salt");
      String hash2 = instance.hash("test2", "salt");
      assertFalse(hash1.equals(hash2));
      String hash3 = instance.hash("test", "salt1");
      String hash4 = instance.hash("test", "salt2");
      assertFalse(hash3.equals(hash4));
  }
 

import org.owasp.esapi.ESAPI; //导入方法依赖的package包/类
/**
* Test of new encrypt / decrypt method for Strings whose length is
* not a multiple of the cipher block size (16 bytes for AES).
* 
* @throws EncryptionException
*             the encryption exception
*/
  public void testEncryptDecrypt1() throws EncryptionException {
      System.out.println("testEncryptDecrypt2()");
      Encryptor instance = ESAPI.encryptor();
      String plaintext = "test1234test1234tes"; // Not a multiple of block size (16 bytes)
      try {
          CipherText ct = instance.encrypt(new PlainText(plaintext));
          PlainText pt = instance.decrypt(ct);
          assertTrue( pt.toString().equals(plaintext) );
      }
      catch( EncryptionException e ) {
      	fail("testEncryptDecrypt2(): Caught exception: " + e);
      }
  }
 

import org.owasp.esapi.ESAPI; //导入方法依赖的package包/类
/**
* Test of new encrypt / decrypt method for Strings whose length is
* same as cipher block size (16 bytes for AES).
*/
  public void testEncryptDecrypt2() {
      System.out.println("testEncryptDecrypt2()");
      Encryptor instance = ESAPI.encryptor();
      String plaintext = "test1234test1234";
      try {
          CipherText ct = instance.encrypt(new PlainText(plaintext));
          PlainText pt = instance.decrypt(ct);
          assertTrue( pt.toString().equals(plaintext) );
      }
      catch( EncryptionException e ) {
      	fail("testEncryptDecrypt2(): Caught exception: " + e);
      }
  }
 

import org.owasp.esapi.ESAPI; //导入方法依赖的package包/类
/**
 * Test of encrypt methods for empty String.
 */
public void testEncryptEmptyStrings() {
    System.out.println("testEncryptEmptyStrings()");
    Encryptor instance = ESAPI.encryptor();
    String plaintext = "";
    try {
        // System.out.println("New encryption methods");
        CipherText ct = instance.encrypt(new PlainText(plaintext));
        PlainText pt = instance.decrypt(ct);
        assertTrue( pt.toString().equals("") );
    } catch(Exception e) {
        fail("testEncryptEmptyStrings() -- Caught exception: " + e);
    }
}
 

import org.owasp.esapi.ESAPI; //导入方法依赖的package包/类
/**
  * Test encryption method for null.
  */
 public void testEncryptNull() {
     System.out.println("testEncryptNull()");
     Encryptor instance = ESAPI.encryptor();
     try {
CipherText ct = instance.encrypt( null );  // Should throw NPE or AssertionError
         fail("New encrypt(PlainText) method did not throw. Result was: " + ct.toString());
     } catch(Throwable t) {
         // It should be one of these, depending on whether or not assertions are enabled.
         assertTrue( t instanceof IllegalArgumentException || t instanceof AssertionError);
     }
 }
 

import org.owasp.esapi.ESAPI; //导入方法依赖的package包/类
/**
  * Test decryption method for null.
  */
 public void testDecryptNull() {
     System.out.println("testDecryptNull()");
     Encryptor instance = ESAPI.encryptor();
     try {
PlainText pt = instance.decrypt( null );  // Should throw IllegalArgumentException or AssertionError
         fail("New decrypt(PlainText) method did not throw. Result was: " + pt.toString());
     } catch(Throwable t) {
         // It should be one of these, depending on whether or not assertions are enabled.
         assertTrue( t instanceof IllegalArgumentException || t instanceof AssertionError);
     }
 }
 

import org.owasp.esapi.ESAPI; //导入方法依赖的package包/类
/**
* Test of sign method, of class org.owasp.esapi.Encryptor.
* 
* @throws EncryptionException
*             the encryption exception
*/
  public void testSign() throws EncryptionException {
      System.out.println("testSign()");        
      Encryptor instance = ESAPI.encryptor();
      String plaintext = ESAPI.randomizer().getRandomString( 32, EncoderConstants.CHAR_ALPHANUMERICS );
      String signature = instance.sign(plaintext);
      assertTrue( instance.verifySignature( signature, plaintext ) );
      assertFalse( instance.verifySignature( signature, "ridiculous" ) );
      assertFalse( instance.verifySignature( "ridiculous", plaintext ) );
  }
 

import org.owasp.esapi.ESAPI; //导入方法依赖的package包/类
/**
* Test of verifySignature method, of class org.owasp.esapi.Encryptor.
* 
* @throws EncryptionException
*             the encryption exception
*/
  public void testVerifySignature() throws EncryptionException {
      System.out.println("testVerifySignature()");
      Encryptor instance = ESAPI.encryptor();
      String plaintext = ESAPI.randomizer().getRandomString( 32, EncoderConstants.CHAR_ALPHANUMERICS );
      String signature = instance.sign(plaintext);
      assertTrue( instance.verifySignature( signature, plaintext ) );
  }