org.keycloak.credential.hash.Pbkdf2Sha512PasswordHashProviderFactory Maven / Gradle / Ivy

Go to download
package org.keycloak.credential.hash;

import org.keycloak.models.KeycloakSession;

/**
 * Provider factory for SHA512 variant of the PBKDF2 password hash algorithm.
 *
 * @author @author Adam Kaplan
 */
public class Pbkdf2Sha512PasswordHashProviderFactory extends AbstractPbkdf2PasswordHashProviderFactory implements PasswordHashProviderFactory {

    public static final String ID = "pbkdf2-sha512";

    public static final String PBKDF2_ALGORITHM = "PBKDF2WithHmacSHA512";

    /**
     * Hash iterations for PBKDF2-HMAC-SHA512 according to the Password Storage Cheat Sheet.
     */
    public static final int DEFAULT_ITERATIONS = 210_000;

    @Override
    public PasswordHashProvider create(KeycloakSession session) {
        return new Pbkdf2PasswordHashProvider(ID, PBKDF2_ALGORITHM, DEFAULT_ITERATIONS, getMaxPaddingLength());
    }

    @Override
    public String getId() {
        return ID;
    }

    @Override
    public int order() {
        return 200;
    }
}