Home >> All >> com >> jcorporate >> expresso >> core >> security >> [ weakencryption Javadoc ]

• com.jcorporate.expresso.core.security.weakencryption: Javadoc index of package com.jcorporate.expresso.core.security.weakencryption.


Package Samples:

• com.jcorporate.expresso.core.security.weakencryption: This package contains Expresso's security system, switchable from "weak" security (e.g.  

Classes:

• StringEncryption: This class provides basic string encryption. It'll provide the services of password whitening and automatic selection of encryption. Known Vulnerabilities. The actual whitened password remains in memory for performance sake. An attacker may find the actual password by looking at swap files looking for Base64 encoded strings. (Not too hard to grep out) but it requires an attacker to gain access to the swap partition of the server. Do not use this class for a personal encryption program.
• RandomNumber: Weak version of the Randum Number Generator. This version only uses the standard PRNG and nothing even close to cryptographic strength.

Home | Contact Us | Privacy Policy | Terms of Service