English 中文(简体)
为我的系统选择加密算法的标准是什么
原标题:what is the criteria to choose encryption algorithm for my system

我正在研究一个将要应用于现实环境中的系统。我需要为系统制定高安全机制,其中之一是对我的数据库中用户的密码进行加密。

与双向加密相比,我更喜欢使用单向加密方法,问题是我想选择一种性能良好、有合理理由说服我的合作伙伴为什么我选择一种算法而不是另一种算法的好算法。

你能给我一些建议吗?

问题回答

不要只使用简单的单向散列。

使用类似PBKDF2bcrypt。我相信Java会有好的、免费的现成实现(假设JRE本身还没有包含这些实现)。

我不知道你在找什么样的论点,但是:

SHA是一个很好的单向散列函数。

http://en.wikipedia.org/wiki/Secure_Hash_Algorithm

编辑:





相关问题
Spring Properties File

Hi have this j2ee web application developed using spring framework. I have a problem with rendering mnessages in nihongo characters from the properties file. I tried converting the file to ascii using ...

Logging a global ID in multiple components

I have a system which contains multiple applications connected together using JMS and Spring Integration. Messages get sent along a chain of applications. [App A] -> [App B] -> [App C] We set a ...

Java Library Size

If I m given two Java Libraries in Jar format, 1 having no bells and whistles, and the other having lots of them that will mostly go unused.... my question is: How will the larger, mostly unused ...

How to get the Array Class for a given Class in Java?

I have a Class variable that holds a certain type and I need to get a variable that holds the corresponding array class. The best I could come up with is this: Class arrayOfFooClass = java.lang....

SQLite , Derby vs file system

I m working on a Java desktop application that reads and writes from/to different files. I think a better solution would be to replace the file system by a SQLite database. How hard is it to migrate ...

热门标签