Activity for jasypt: java simplified encryption

Raushan Kumar created ticket #45

Raushan Kumar — Wed, 04 Sep 2024 16:42:37 -0000

org.jasypt.exceptions.EncryptionOperationNotPossibleException:

Björn Voigt posted a comment on ticket #18

Björn Voigt — Thu, 16 Jan 2020 09:25:21 -0000

Does it work for Hibernate 5?

Mark Grimes posted a comment on ticket #32

Mark Grimes — Fri, 07 Jun 2019 16:34:36 -0000

Thank you Hoki! It works beautifully!

Hoki Torres posted a comment on ticket #32

Hoki Torres — Tue, 04 Jun 2019 20:07:49 -0000

PBEWithDigestAndAESalgorithms (from the JCE Provider of JAVA 8) are supported. They require an initialization vector (IV) parameter. By default Jasypt PBExxEncryptors use a NoIvGenerator for maintaining backwards compatibility and decrypt values encrypted with previous Jasypt versions. Establishing a IvGenerator will solve the issue. The IV should be random and only used one time, so org.jasypt.RandomIvGenerator is the recommended one: encryptor.setIvGenerator(new RandomIvGenerator());

Mark Grimes modified a comment on ticket #32

Mark Grimes — Fri, 31 May 2019 21:52:59 -0000

Tested using previously posted test code. For secure hashing algorithms... 1.9.2 NOT_POSSIBLE DECRYPT 1.9.3 NOT_POSSIBLE melloware fork (1.9.3, 1.9.4) OK compile group: 'org.jasypt', name: 'jasypt', version: '1.9.2' Version: 1.8.0_152, max key length: 2147483647 (JCE: YES) Algorithm Result PBEWITHHMACSHA1ANDAES_128 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA1ANDAES_256 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA224ANDAES_128 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA224ANDAES_256 NOT_POSSIBLE_DECRYPT PBEWITHHMACSHA256ANDAES_128...

Mark Grimes posted a comment on ticket #32

Mark Grimes — Fri, 31 May 2019 21:51:14 -0000

Hoki Torres modified ticket #44

Hoki Torres — Mon, 27 May 2019 08:08:50 -0000

Using Standard PBE Encryptors for BigDecimal or BigInteger causes unnecessary exception on VMs with large amounts of freespace

Hoki Torres posted a comment on ticket #44

Hoki Torres — Mon, 27 May 2019 08:08:50 -0000

Fixed in jasypt v1.9.3 released yesterday

jasypt: java simplified encryption released /jasypt/jasypt 1.9.3/jasypt-1.9.3-dist.zip

jasypt: java simplified encryption — Sun, 26 May 2019 19:50:02 -0000

Hoki Torres modified ticket #32

Hoki Torres — Sun, 26 May 2019 15:49:55 -0000

encryption works but decryption does not, Java 8 (JCE jars installed).

Hoki Torres posted a comment on ticket #32

Hoki Torres — Sun, 26 May 2019 15:49:23 -0000

Fixed in 1.9.3.

Martin Lichtin posted a comment on ticket #32

Martin Lichtin — Tue, 12 Mar 2019 10:50:13 -0000

Just received good news from Hoki Torres Erausquin - they'll return to the project, migrate it to GitHub and plan to release a new version hopefully within the next 6 weeks.

Melloware Inc posted a comment on ticket #32

Melloware Inc — Sat, 09 Mar 2019 13:43:57 -0000

Martin, I agree with you but its been 5 years with no activity. I have absolutely NO idea but one thing to speculate is the project owner/author is possibly no longer alive. He has not posted a single thing or response in 4 years.

Martin Lichtin posted a comment on ticket #32

Martin Lichtin — Sat, 09 Mar 2019 13:25:35 -0000

That's great to hear. But why can't the standard "jasypt:jasypt" be updated and released?

Melloware Inc posted a comment on ticket #32

Melloware Inc — Tue, 26 Feb 2019 15:47:55 -0000

I also forked this project: https://github.com/melloware/jasypt And released to Maven Central: com.melloware jasypt 1.9.4

Kurt Murrell posted a comment on ticket #32

Kurt Murrell — Tue, 26 Feb 2019 15:45:30 -0000

In case anyone runs accross this thread in the future, RedHat has actually forked this project to support new ciphers and Java versions as a part of their JBOSS Fuse platform. Their public GitHub repo can be found here: https://github.com/jboss-fuse/jasypt/tree/master/jasypt Compile this just like upstream jasypt (mvn clean:clean install) and it'll produce the same JAR artifacts. I've tested this with JDK 1.8 and it works flawlessly to encrypt/decrypt PBEWITHHMACSHA512ANDAES_256. As that's the highest...

Melloware Inc posted a comment on ticket #32

Melloware Inc — Wed, 18 Jul 2018 12:55:20 -0000

No releases in 4 years? This open issue preventing using encyrption algorithms in JAVA 8. Is this project dead? If so are the devleopers willing to turn it over to people willing to maintain and release it?

Amir Levy posted a comment on ticket #44

Amir Levy — Mon, 29 Jan 2018 16:32:58 -0000

Any news? This bug is serious

Martin Lichtin posted a comment on ticket #32

Martin Lichtin — Sat, 13 Jan 2018 15:03:51 -0000

Wanted to ask if there's soon a new release with this fix in?

Dhiraj Ray posted a comment on a wiki page

Dhiraj Ray — Thu, 28 Dec 2017 10:30:01 -0000

This Jasypt online tool - Jasypt Encrypt Decrypt is also helpful.

Artem Astafyev posted a comment on ticket #32

Artem Astafyev — Tue, 18 Jul 2017 20:33:51 -0000

Thanks Ryan! I followed instructions of installing BC on their site and they didn't mention that "Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy" is required too. After installing it all works fine!

Mariusz Pacek posted a comment on ticket #32

Mariusz Pacek — Tue, 18 Jul 2017 15:21:18 -0000

@Ryan Dawson thx it worked. Problem also occur in apache Karaf wiht jasyp properties module and we are witing for update

Ryan Dawson posted a comment on ticket #32

Ryan Dawson — Thu, 13 Jul 2017 17:46:44 -0000

I just installed the policy files into my JVM and then configured bouncy castle. I was then able to use the encrypt and decrypt tools provided with jasypt to encryp and then decrypt a string using PBEWITHSHAAND256BITAES-CBC-BC. I followed these pages for adding the policy extensions: http://suhothayan.blogspot.co.uk/2012/05/how-to-install-java-cryptography.html https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec1698523.html Bouncy castle I installed statically...

Artem Astafyev posted a comment on ticket #32

Artem Astafyev — Thu, 13 Jul 2017 09:01:37 -0000

Ryan, could you plese elaborate how did you manage to get AES with Bouncy Castle working? I get the same error "Operation not possible (Bad input or parameters)" both with built-in JCE and BC.

Tomasz Juchniewicz posted a comment on ticket #32

Tomasz Juchniewicz — Tue, 11 Jul 2017 12:41:06 -0000

Right. But we want to use Java 8 support for x86 AES intrinsics built-in in SunJCE provider

Ryan Dawson posted a comment on ticket #32

Ryan Dawson — Tue, 11 Jul 2017 12:14:52 -0000

For what it's worth I found that using AES does work with Bouncy Castle. The bug only affects the Java8 built-in JCE. But naturally not everyone wants to use Bouncy Castle.

Tomasz Juchniewicz posted a comment on ticket #32

Tomasz Juchniewicz — Tue, 11 Jul 2017 11:25:04 -0000

I'm also waiting for this patch. We can't you AES with Java 8 right now.

Ryan Dawson posted a comment on ticket #32

Ryan Dawson — Fri, 16 Jun 2017 13:08:47 -0000

I pointed my project at the latest snapshot and it looks like the fix from Mark Williams above isn't included right now. Is there a plan for when this will be included?

Chus Picos committed [r743]

Chus Picos — Sun, 04 Jun 2017 21:21:22 -0000

Moved due to an error on commit

Chus Picos committed [r742]

Chus Picos — Sun, 04 Jun 2017 21:20:07 -0000

Moved due to an error on commit

Chus Picos committed [r741]

Chus Picos — Sun, 04 Jun 2017 21:16:46 -0000

Added testapp project for spring 4.x

Chus Picos committed [r740]

Chus Picos — Sun, 04 Jun 2017 21:15:37 -0000

Share project "jasypt-spring4-testapp" into "https://svn.code.sf.net/p/jasypt/code"

Chus Picos committed [r739]

Chus Picos — Sun, 04 Jun 2017 21:15:02 -0000

Added support for spring 4.x

Chus Picos committed [r738]

Chus Picos — Sun, 04 Jun 2017 21:12:21 -0000

Added support for spring 4.x

Chus Picos committed [r737]

Chus Picos — Sun, 04 Jun 2017 21:09:33 -0000

Modified ChangeLog.txt and added missing files for publication

Hoki Torres committed [r736]

Hoki Torres — Tue, 30 May 2017 07:17:00 -0000

Add support for spring security 4.x

Chus Picos committed [r735]

Chus Picos — Sun, 28 May 2017 17:22:00 -0000

#44 Using Standard PBE Encryptors for BigDecimal or BigInteger causes unnecessary exception on VMs with large amounts of freespace

Hoki Torres committed [r734]

Hoki Torres — Sat, 27 May 2017 17:57:30 -0000

Deprecate modules intendend for old technologies

Mark Williams posted a comment on ticket #32

Mark Williams — Thu, 18 May 2017 16:49:10 -0000

Modified Main.java example using PBEConfig.

Mark Williams posted a comment on ticket #32

Mark Williams — Thu, 18 May 2017 16:48:19 -0000

I took Andrews patch and applied it to jasypt-1.9.3-SNAPSHOT. I was trying to use PBEWithHmacSHA512AndAES_256 algorithm on apache ActiveMQ, which requires an "iv". Seems Jasypt / Spring has issues with mapping parameters to beans that are not named in camel case. So getIV()/setIV() basically make it impossible to map the values to the PBEConfig object. When I renamed these as getIv()/setIv() then spring was able to map them. There also seems to be an issue with setting the parameters to the PBEConfig...

Garima Yadav modified a comment on ticket #29

Garima Yadav — Fri, 12 May 2017 15:23:48 -0000

Enlcosing sample code which works with javax.crypto api, but did not find any option to get the same result ( encryption key) with jasypt api. After analyzing the code, it seems that PBEKeySpec has been used with only option to set Password in constructor. Can we get the support to use PBEKeySpec(char[] password, byte[] salt, int iterationCount, int keyLength) as well, so that we can generate fixed key after setting password, fixed salt, iteration count and key length.? final PBEKeySpec pbeKeySpec...

Garima Yadav modified a comment on ticket #29

Garima Yadav — Fri, 12 May 2017 15:22:51 -0000

Garima Yadav modified a comment on ticket #29

Garima Yadav — Fri, 12 May 2017 14:42:05 -0000

Garima Yadav posted a comment on ticket #29

Garima Yadav — Fri, 12 May 2017 14:40:53 -0000

Garima Yadav created ticket #29

Garima Yadav — Fri, 12 May 2017 14:32:08 -0000

Support for setting key length and fixed value of SALT in Cipher

Hoki Torres posted a comment on ticket #32

Hoki Torres — Wed, 03 May 2017 17:22:11 -0000

We expect to release it for the week of May 29.

Brendan Collins posted a comment on ticket #32

Brendan Collins — Thu, 27 Apr 2017 14:29:57 -0000

Hoki, Can you offer any refinement on timeframe for a new jasypt release? Thanks!

Hoki Torres posted a comment on ticket #44

Hoki Torres — Thu, 20 Apr 2017 08:09:15 -0000

We are working on this and we expect to have a new version soon, hopefully as soon as May.

Mykola Makhin posted a comment on ticket #44

Mykola Makhin — Wed, 19 Apr 2017 16:30:50 -0000

Still open? o_O

Brendan Collins posted a comment on ticket #32

Brendan Collins — Thu, 06 Apr 2017 12:48:52 -0000

Thanks for tth update Hoki!

Hoki Torres posted a comment on ticket #32

Hoki Torres — Wed, 05 Apr 2017 15:39:05 -0000

We are working on this and we expect to have a new version soon, hopefully as soon...

Preetam posted a comment on ticket #32

Preetam — Wed, 05 Apr 2017 12:37:27 -0000

Yeah - came across this and looks like fix is simple - explicitely specify IV during...

Brendan Collins posted a comment on ticket #32

Brendan Collins — Mon, 03 Apr 2017 21:40:36 -0000

Any plans to release an update with this fix? If so is there a timeframe? Thanks

Chus Picos committed [r733]

Chus Picos — Sun, 18 Dec 2016 23:34:26 -0000

Added jasypt-hibernate5

Chus Picos committed [r732]

Chus Picos — Sun, 18 Dec 2016 23:31:18 -0000

Share project "jasypt-hibernate5" into "https:/...

Mykola Makhin posted a comment on ticket #44

Mykola Makhin — Mon, 14 Nov 2016 19:02:32 -0000

Greetings. This is a very serious issue (it blocks us from using Jasypt entirely)...

Daniel Fernandez committed [r731]

Daniel Fernandez — Tue, 08 Nov 2016 15:06:09 -0000

Updated team structure

Michal Aron created ticket #28

Michal Aron — Wed, 14 Sep 2016 16:52:04 -0000

Hibernate 5 support/classes

Mark Haller created ticket #27

Mark Haller — Mon, 06 Jun 2016 03:47:04 -0000

Spring PasswordEncoder interface

JF99 created ticket #44

JF99 — Mon, 21 Mar 2016 13:31:49 -0000

Using Standard PBE Encryptors for BigDecimal or BigInteger causes unnecessary exception on VMs with large amounts of freespace

Andrew posted a comment on ticket #32

Andrew — Sat, 06 Feb 2016 23:46:20 -0000

The attached patch can only be built/used Java >= 8, as the PBEParameterSpec constructor...

outofcoffee modified a comment on ticket #32

outofcoffee — Sun, 24 Jan 2016 21:20:57 -0000

@jacoby any chance you can look at this soon? This makes strong encryption difficult...

outofcoffee posted a comment on ticket #32

outofcoffee — Sun, 24 Jan 2016 21:19:42 -0000

@jacoby any chance you can look at this soon? This makes strong encryption difficult...

Earl Baugh posted a comment on ticket #18

Earl Baugh — Thu, 10 Dec 2015 20:35:58 -0000

+1 Hitting same issue. Any chance of getting a new release with the few bugs on the...

Earl Baugh posted a comment on ticket #41

Earl Baugh — Wed, 09 Dec 2015 22:47:08 -0000

sagar created ticket #43

sagar — Sat, 21 Nov 2015 06:27:05 -0000

BasicTextEncryptor encryptor issue

Daniel Diehl created ticket #42

Daniel Diehl — Fri, 07 Aug 2015 18:02:32 -0000

WebPBEConfig does not work properly with encryptable-property-placeholder

Michael Smith created ticket #41

Michael Smith — Tue, 28 Jul 2015 18:20:14 -0000

EncryptedPasswordC3P0ConnectionProvider broken since Hibernate 4.3.x

Dr Harp created ticket #40

Dr Harp — Thu, 14 May 2015 16:28:42 -0000

Spring 4 @PropertySource not being decrypted

Scott Tatum posted a comment on ticket #28

Scott Tatum — Tue, 28 Apr 2015 15:22:56 -0000

Well, I'm sure you've moved on by now, either successfully or unsuccessfully, but...

Liam Jones posted a comment on ticket #32

Liam Jones — Mon, 02 Mar 2015 15:54:37 -0000

Also ran into this issue today while looking at Jasypt

eiden created ticket #39

eiden — Wed, 25 Feb 2015 16:23:10 -0000

Should PBEKeySpec#clearPassword be invoked in StandardPBEByteEncryptor#initialize?

kozla13 created ticket #38

kozla13 — Tue, 24 Feb 2015 09:01:31 -0000

PooledPBEStringEncryptor No performance boost!!!

Fedor posted a comment on ticket #32

Fedor — Tue, 17 Feb 2015 11:52:38 -0000

Hello, Any plans to fix this bug soon? Looks like easy job - just add new IvParameterSpec...

Nestor Urquiza posted a comment on ticket #37

Nestor Urquiza — Mon, 12 Jan 2015 21:23:22 -0000

This is only related to bouncy castle BTW. With the weak PBEWithMD5AndDES algo it...

Nestor Urquiza created ticket #37

Nestor Urquiza — Mon, 12 Jan 2015 20:42:38 -0000

encrypt.sh supports no more than 7 characters for password

smithsdevin posted a comment on ticket #32

smithsdevin — Fri, 19 Dec 2014 20:48:25 -0000

I found the same thing today. The actual exception gets swallowed though: java.security.InvalidAlgorithmParameterException:...

Allan Ditzel posted a comment on ticket #35

Allan Ditzel — Mon, 15 Dec 2014 17:04:06 -0000

I too am getting this error.

eloo created ticket #36

eloo — Tue, 02 Dec 2014 04:48:15 -0000

Line #396 of EncryptedBinaryType.checkInitialization() error message misleading

Suganthi created ticket #35

Suganthi — Mon, 24 Nov 2014 12:06:12 -0000

Not able to access encryption element using url http://www.jasypt.org/schema/encryption/

Seán McPoland posted a comment on ticket #26

Seán McPoland — Mon, 29 Sep 2014 11:00:52 -0000

Thanks Daniel, you've lost me there, I'm not a java guru like you, In-fact I've only...

Seán McPoland posted a comment on ticket #26

Seán McPoland — Mon, 29 Sep 2014 08:46:28 -0000

Thanks Daniel, you've lost me there, I'm not a java guru like you, In-fact I've only...

Daniel Fernandez posted a comment on ticket #26

Daniel Fernandez — Mon, 29 Sep 2014 08:20:36 -0000

We don't have any direct integration class for the ResourceBundle interface... but...

Seán McPoland created ticket #26

Seán McPoland — Mon, 29 Sep 2014 07:15:20 -0000

ResourceBundles - Multilingual properties Encryption

Daniel Fernandez modified ticket #25

Daniel Fernandez — Wed, 24 Sep 2014 22:44:39 -0000

Is the jasypt project still alive?

Daniel Fernandez posted a comment on ticket #25

Daniel Fernandez — Wed, 24 Sep 2014 22:44:39 -0000

Answered, sorry for the delay.

Daniel Fernandez modified ticket #34

Daniel Fernandez — Wed, 24 Sep 2014 22:42:56 -0000

PBE encryption/decryption, decryption "decrypts" w/ garbage rather than throwing EncryptionOperationNotPossibleException

Daniel Fernandez posted a comment on ticket #34

Daniel Fernandez — Wed, 24 Sep 2014 22:42:22 -0000

This is expected behaviour. As happens with your own code, Jasypt has no way to determine...

bitsofinfo posted a comment on ticket #25

bitsofinfo — Wed, 24 Sep 2014 19:15:12 -0000

Where does one interact w/ the community? I posted a question/issue on 9/2 and still...

bitsofinfo posted a comment on ticket #25

bitsofinfo — Tue, 02 Sep 2014 17:03:19 -0000

Please see this ticket https://sourceforge.net/p/jasypt/bugs/34/

bitsofinfo created ticket #34

bitsofinfo — Tue, 02 Sep 2014 17:02:10 -0000

PBE encryption/decryption, decryption "decrypts" w/ garbage rather than throwing EncryptionOperationNotPossibleException

bitsofinfo posted a comment on ticket #25

bitsofinfo — Tue, 02 Sep 2014 16:24:37 -0000

Ok great. I have a question w/ regards to behavior and I had no idea where to get...

Daniel Fernandez posted a comment on ticket #25

Daniel Fernandez — Tue, 02 Sep 2014 06:05:46 -0000

Jasypt is DEFINITELY alive! Last version was released on February 25th, 2014. Both...

Daniel Fernandez posted a comment on ticket #25

Daniel Fernandez — Tue, 02 Sep 2014 06:04:43 -0000

Ticket moved from /p/jasypt/bugs/33/

bitsofinfo created ticket #33

bitsofinfo — Tue, 02 Sep 2014 02:48:38 -0000

Is the jasypt project still alive?

nobulletnav posted a comment on ticket #32

nobulletnav — Wed, 13 Aug 2014 22:22:06 -0000

Sorry, I can't find the edit button. B. With JCE jars installed (well formatted):...

nobulletnav created ticket #32

nobulletnav — Wed, 13 Aug 2014 22:09:02 -0000

encryption works but decryption does not, Java 8 (JCE jars installed).

Pete Johanson created ticket #24

Pete Johanson — Sat, 19 Jul 2014 04:12:52 -0000

Support base64url string output type

Steve created ticket #31

Steve — Mon, 14 Jul 2014 15:49:29 -0000

NullPointerException when password when password missing

Beckah Sheeler created ticket #30

Beckah Sheeler — Tue, 20 May 2014 17:32:13 -0000

Java File I/O not working with Jasypt encryption library