Java使用Jasypt进行加密和解密的技术指南

<dependency>
    <groupId>com.github.ulisesbocchio</groupId>
    <artifactId>jasypt-spring-boot-starter</artifactId>
    <version>3.0.5</version>
</dependency>

spring.datasource.url=jdbc:mysql://localhost:3306/mydb
spring.datasource.username=root
spring.datasource.password=ENC(encrypted_password)

jasypt encrypt input=my_password password=my_secret_key algorithm=PBEWithMD5AndDES

ENC(3bf2jN+/NfM45y8OeM7TfQ==)

jasypt.encryptor.password=my-strong-secret-key
jasypt.encryptor.algorithm=PBEWithHMACSHA512AndAES_256
jasypt.encryptor.key-obtention-iterations=2000
jasypt.encryptor.pool-size=4
jasypt.encryptor.salt-generator-classname=org.jasypt.salt.RandomSaltGenerator

import org.jasypt.encryption.StringEncryptor;
import org.jasypt.encryption.pbe.PooledPBEStringEncryptor;
import org.jasypt.salt.RandomSaltGenerator;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

@Configuration
public class JasyptConfig {
    @Bean("jasyptStringEncryptor")
    public StringEncryptor stringEncryptor() {
        PooledPBEStringEncryptor encryptor = new PooledPBEStringEncryptor();
        encryptor.setPassword("my-strong-secret-key");
        encryptor.setAlgorithm("PBEWithMD5AndTripleDES");
        encryptor.setKeyObtentionIterations(2000);
        encryptor.setPoolSize(4);
        encryptor.setSaltGenerator(new RandomSaltGenerator());
        return encryptor;
    }
}

import org.jasypt.encryption.pbe.StandardPBEStringEncryptor;

public class AdvancedJasyptExample {
    public static void main(String[] args) {
        // 创建加密器
        StandardPBEStringEncryptor encryptor = new StandardPBEStringEncryptor();
        encryptor.setPassword("my-strong-secret-key"); // 设置密钥
        encryptor.setAlgorithm("PBEWithHMACSHA512AndAES_256"); // 设置高级算法

        // 加密
        String sensitiveData = "SuperSecretPassword123";
        String encryptedData = encryptor.encrypt(sensitiveData);
        System.out.println("Encrypted Data: " + encryptedData);

        // 解密
        String decryptedData = encryptor.decrypt(encryptedData);
        System.out.println("Decrypted Data: " + decryptedData);
    }
}

import org.jasypt.encryption.pbe.PooledPBEStringEncryptor;
import org.jasypt.salt.RandomSaltGenerator;

public class SaltAndIterationExample {
    public static void main(String[] args) {
        // 创建加密器
        PooledPBEStringEncryptor encryptor = new PooledPBEStringEncryptor();
        encryptor.setPassword("my-strong-secret-key");
        encryptor.setAlgorithm("PBEWithMD5AndTripleDES");
        encryptor.setPoolSize(4); // 线程池大小

        // 设置盐值生成器和迭代次数
        encryptor.setSaltGenerator(new RandomSaltGenerator());
        encryptor.setKeyObtentionIterations(1000); // 增加破解难度

        // 加密
        String sensitiveData = "ImportantDataToEncrypt";
        String encryptedData = encryptor.encrypt(sensitiveData);
        System.out.println("Encrypted Data: " + encryptedData);

        // 解密
        String decryptedData = encryptor.decrypt(encryptedData);
        System.out.println("Decrypted Data: " + decryptedData);
    }
}