com.kyleu.projectile.util.EncryptionUtils.scala Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of projectile-lib-scala_2.12 Show documentation

Common classes relating to core models and utilities

The newest version!

package com.kyleu.projectile.util

import java.security.MessageDigest

import javax.crypto.Cipher
import javax.crypto.spec.SecretKeySpec

import org.apache.commons.codec.binary.Base64

import scala.util.control.NonFatal

/** Uses a user-provided secret to encrypt and decrypt arbitrary bytes and strings using AES/ECB/PKCS5Padding */
object EncryptionUtils {
  private[this] var key: Option[String] = None
  private[this] val salt = "salt-value-changeme"
  private[this] lazy val spec = keyToSpec(key.getOrElse(throw new IllegalStateException("Encryption key has not been set")))

  def setKey(k: String) = key = Some(k)

  def encrypt(value: String) = encryptBytes(value.getBytes("UTF-8"))

  def encryptBytes(value: Array[Byte]) = {
    val cipher: Cipher = Cipher.getInstance("AES/ECB/PKCS5Padding")
    cipher.init(Cipher.ENCRYPT_MODE, spec)
    Base64.encodeBase64String(cipher.doFinal(value))
  }

  def decrypt(encryptedValue: String, throwOnError: Boolean = false) = new String(decryptBytes(encryptedValue, throwOnError))

  def decryptBytes(encryptedValue: String, throwOnError: Boolean = false) = try {
    val cipher: Cipher = Cipher.getInstance("AES/ECB/PKCS5PADDING")
    cipher.init(Cipher.DECRYPT_MODE, spec)
    cipher.doFinal(Base64.decodeBase64(encryptedValue))
  } catch {
    case NonFatal(x) => if (throwOnError) { throw x } else { Array.empty[Byte] }
  }

  private[this] def keyToSpec(key: String) = {
    var keyBytes: Array[Byte] = (salt + key).getBytes("UTF-8")
    val sha: MessageDigest = MessageDigest.getInstance("SHA-1")
    keyBytes = sha.digest(keyBytes)
    keyBytes = java.util.Arrays.copyOf(keyBytes, 16)
    new SecretKeySpec(keyBytes, "AES")
  }
}