org.apache.nifi.security.util.crypto

Class KeyDerivationBcryptSecureHasher

java.lang.Object

org.apache.nifi.security.util.crypto.AbstractSecureHasher

org.apache.nifi.security.util.crypto.BcryptSecureHasher

org.apache.nifi.security.util.crypto.KeyDerivationBcryptSecureHasher

All Implemented Interfaces:

SecureHasher

public class KeyDerivationBcryptSecureHasher
extends BcryptSecureHasher

Extension of Bcrypt Secure Hasher used for Key Derivation support. Allows specifying a Derived Key Length in bytes.

Field Summary

Fields

Modifier and Type	Field and Description
private int	derivedKeyLength
private static String	DIGEST_ALGORITHM
private boolean	digestBcryptHash
private static int	HASH_START_INDEX
private static org.slf4j.Logger	LOGGER

Fields inherited from class org.apache.nifi.security.util.crypto.AbstractSecureHasher

saltLength, UPPER_BOUNDARY

Constructor Summary

Constructors

Constructor and Description
KeyDerivationBcryptSecureHasher(int derivedKeyLength) Key Deriviation Bcrypt Secure Hasher with specified Derived Key Length
KeyDerivationBcryptSecureHasher(int derivedKeyLength, int cost, boolean digestBcryptHash) Key Deriviation Bcrypt Secure Hasher with specified Derived Key Length and Cost Parameters

Method Summary

Modifier and Type	Method and Description
private MessageDigest	getMessageDigest()
(package private) byte[]	hash(byte[] input, byte[] rawSalt) Hash raw bytes using provided salt and then leverage SHA-512 to digest the results and truncate to length requested

Methods inherited from class org.apache.nifi.security.util.crypto.BcryptSecureHasher

acceptsEmptyInput, convertBcryptRadix64ToMimeBase64, convertMimeBase64ToBcryptRadix64, getAlgorithmName, getDefaultSaltLength, getMaxSaltLength, getMinSaltLength, hash, isCostValid

Methods inherited from class org.apache.nifi.security.util.crypto.AbstractSecureHasher

getSalt, hashBase64, hashBase64, hashHex, hashHex, hashRaw, hashRaw, initializeSalt, isSaltLengthValid, isUsingStaticSalt

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOGGER

private static final org.slf4j.Logger LOGGER

DIGEST_ALGORITHM

private static final String DIGEST_ALGORITHM

See Also:

Constant Field Values

HASH_START_INDEX

private static final int HASH_START_INDEX

See Also:

Constant Field Values

derivedKeyLength

private final int derivedKeyLength

digestBcryptHash

private final boolean digestBcryptHash

Constructor Detail

KeyDerivationBcryptSecureHasher

public KeyDerivationBcryptSecureHasher(int derivedKeyLength)

Key Deriviation Bcrypt Secure Hasher with specified Derived Key Length

Parameters:

derivedKeyLength - Derived Key Length in bytes

KeyDerivationBcryptSecureHasher

public KeyDerivationBcryptSecureHasher(int derivedKeyLength,
                                       int cost,
                                       boolean digestBcryptHash)

Key Deriviation Bcrypt Secure Hasher with specified Derived Key Length and Cost Parameters

Parameters:

derivedKeyLength - Derived Key Length in bytes

cost - Cost Parameter for calculation

digestBcryptHash - Enable to disable digesting of bcrypt hash to support legacy derivation functions

Method Detail

hash

byte[] hash(byte[] input,
            byte[] rawSalt)

Hash raw bytes using provided salt and then leverage SHA-512 to digest the results and truncate to length requested

Overrides:

hash in class BcryptSecureHasher

Parameters:

input - Raw bytes to be hashed

rawSalt - Raw salt bytes to be hashed

Returns:

Hash bytes digested using SHA-512 and truncated to derived key length configured

getMessageDigest

private MessageDigest getMessageDigest()