CODEWITHSUNDEEP
javaencryptionkey
user3511446
user3511446

Reputation: 1

Convert a string into a key

Is there a way to convert a string into a key so I can have the same encryption key for encoding/decoding? I do not mean using SecretKey btw.

Key symKey = KeyGenerator.getInstance(algorithm).generateKey();

I am using the DES algorithm btw

Upvotes: 0

Views: 86

Answers (1)

Artjom B.
Artjom B.

Reputation: 61892

You probably mean a key derivation from a password. A popular approach is to use PBKDF2 in Java as discussed for example here. Don't forget to set the iteration count high to complicate brute-force attacks and set a random salt to prevent dictionary attacks.

A random salt is mandatory by now during user authentication, but it may also be used during encryption. It is just another public value that is added to the ciphertext like the IV for CBC mode.

Other alternatives would be bcrypt and scrypt which require additional libraries in Java.

Upvotes: 1

Related Questions