Home/ Questions/Q 6229441
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-24T09:34:01+00:00

I know enough about cryptology to make life difficult for a novice programmer and

  • 0

I know enough about cryptology to make life difficult for a novice programmer and get laughed at by security experts. So with that in mind, I ask: how secure is javax.crypto.Cipher? I realise that anything can be cracked by someone with a will and a way, but I still would like to know relative details.

The reason I ask is I would like to store account names and passwords that will be sent through my Cryptor class that will encrpyt them, and would like to know if this will do the job. If any one has any literature that I could read, that would be greatly apprieciated.

Thanks ~Aedon

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    If you intend to store passwords securely, then your requirements are quite different from simply “communicating securely/privately”. A Cipher on its own is not enough to protect you. You need to use one of these

    in that circumstance. Here are some arguments and links concerning password security.

    The punchline is that “normal” encryption (or hashing, too) is just way too fast to hold off serious attackers. You want to artificially slow down the entire process to make it as hard as possible for somebody systematically attacking your application. A single user won’t notice the difference between 1 or 500 milliseconds when entering a password but for an attacker this means that in order to break your scheme it will take them 500 times as long on the average – so if it would have taken roughly 1 month to find a valid password before, now it will take 500 months.

    • 0