Activity for jasypt: java simplified encryption
-
Raushan Kumar created ticket #45
org.jasypt.exceptions.EncryptionOperationNotPossibleException:
-
Björn Voigt posted a comment on ticket #18
Does it work for Hibernate 5?
-
Mark Grimes posted a comment on ticket #32
Thank you Hoki! It works beautifully!
-
Hoki Torres posted a comment on ticket #32
PBEWithDigestAndAESalgorithms (from the JCE Provider of JAVA 8) are supported. They require an initialization vector (IV) parameter. By default Jasypt PBExxEncryptors use a NoIvGenerator for maintaining backwards compatibility and decrypt values encrypted with previous Jasypt versions. Establishing a IvGenerator will solve the issue. The IV should be random and only used one time, so org.jasypt.RandomIvGenerator is the recommended one: encryptor.setIvGenerator(new RandomIvGenerator());
-
Tested using previously posted test code. For secure hashing algorithms... 1.9.2 NOT_POSSIBLE DECRYPT 1.9.3 NOT_POSSIBLE melloware fork (1.9.3, 1.9.4) OK compile group: 'org.jasypt', name: 'jasypt', version: '1.9.2' Version: 1.8.0_152, max key length: 2147483647 (JCE: YES) Algorithm Result PBEWITHHMACSHA1ANDAES_128 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA1ANDAES_256 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA224ANDAES_128 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA224ANDAES_256 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA256ANDAES_128...
-
Tested using previously posted test code. For secure hashing algorithms... 1.9.2 NOT_POSSIBLE DECRYPT 1.9.3 NOT_POSSIBLE melloware fork (1.9.3, 1.9.4) OK compile group: 'org.jasypt', name: 'jasypt', version: '1.9.2' Version: 1.8.0_152, max key length: 2147483647 (JCE: YES) Algorithm Result PBEWITHHMACSHA1ANDAES_128 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA1ANDAES_256 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA224ANDAES_128 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA224ANDAES_256 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA256ANDAES_128...
-
Using Standard PBE Encryptors for BigDecimal or BigInteger causes unnecessary exception on VMs with large amounts of freespace
-
Fixed in jasypt v1.9.3 released yesterday
-
jasypt: java simplified encryption released /jasypt/jasypt 1.9.3/jasypt-1.9.3-dist.zip
-
encryption works but decryption does not, Java 8 (JCE jars installed).
-
Fixed in 1.9.3.
-
Martin Lichtin posted a comment on ticket #32
Just received good news from Hoki Torres Erausquin - they'll return to the project, migrate it to GitHub and plan to release a new version hopefully within the next 6 weeks.
-
Melloware Inc posted a comment on ticket #32
Martin, I agree with you but its been 5 years with no activity. I have absolutely NO idea but one thing to speculate is the project owner/author is possibly no longer alive. He has not posted a single thing or response in 4 years.
-
That's great to hear. But why can't the standard "jasypt:jasypt" be updated and released?
-
I also forked this project: https://github.com/melloware/jasypt And released to Maven Central: <dependency> <groupId>com.melloware</groupId> <artifactId>jasypt</artifactId> <version>1.9.4</version> </dependency>
-
Kurt Murrell posted a comment on ticket #32
In case anyone runs accross this thread in the future, RedHat has actually forked this project to support new ciphers and Java versions as a part of their JBOSS Fuse platform. Their public GitHub repo can be found here: https://github.com/jboss-fuse/jasypt/tree/master/jasypt Compile this just like upstream jasypt (mvn clean:clean install) and it'll produce the same JAR artifacts. I've tested this with JDK 1.8 and it works flawlessly to encrypt/decrypt PBEWITHHMACSHA512ANDAES_256. As that's the highest...
-
No releases in 4 years? This open issue preventing using encyrption algorithms in JAVA 8. Is this project dead? If so are the devleopers willing to turn it over to people willing to maintain and release it?
-
Amir Levy posted a comment on ticket #44
Any news? This bug is serious
-
Wanted to ask if there's soon a new release with this fix in?
-
Dhiraj Ray posted a comment on a wiki page
This Jasypt online tool - Jasypt Encrypt Decrypt is also helpful.
-
Artem Astafyev posted a comment on ticket #32
Thanks Ryan! I followed instructions of installing BC on their site and they didn't mention that "Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy" is required too. After installing it all works fine!
-
Mariusz Pacek posted a comment on ticket #32
@Ryan Dawson thx it worked. Problem also occur in apache Karaf wiht jasyp properties module and we are witing for update
-
Ryan Dawson posted a comment on ticket #32
I just installed the policy files into my JVM and then configured bouncy castle. I was then able to use the encrypt and decrypt tools provided with jasypt to encryp and then decrypt a string using PBEWITHSHAAND256BITAES-CBC-BC. I followed these pages for adding the policy extensions: http://suhothayan.blogspot.co.uk/2012/05/how-to-install-java-cryptography.html https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec1698523.html Bouncy castle I installed statically...
-
Ryan, could you plese elaborate how did you manage to get AES with Bouncy Castle working? I get the same error "Operation not possible (Bad input or parameters)" both with built-in JCE and BC.
-
Tomasz Juchniewicz posted a comment on ticket #32
Right. But we want to use Java 8 support for x86 AES intrinsics built-in in SunJCE provider
-
For what it's worth I found that using AES does work with Bouncy Castle. The bug only affects the Java8 built-in JCE. But naturally not everyone wants to use Bouncy Castle.
-
I'm also waiting for this patch. We can't you AES with Java 8 right now.
-
I pointed my project at the latest snapshot and it looks like the fix from Mark Williams above isn't included right now. Is there a plan for when this will be included?
-
Chus Picos committed [r743]
Moved due to an error on commit
-
Moved due to an error on commit
-
Added testapp project for spring 4.x
-
Share project "jasypt-spring4-testapp" into "https://svn.code.sf.net/p/jasypt/code"
-
Added support for spring 4.x
-
Added support for spring 4.x
-
Modified ChangeLog.txt and added missing files for publication
-
Add support for spring security 4.x
-