用Java加密解密数据

Question

I have developed Rest web services in Java which takes Passwords and sensitive data from request body. How can I decrypt these data from my side and request sender can also enrypt at their end in same way?

Answer 1

Basically by changing your design to use end-to-end encryption, via TLS.

In other words, you ensure that all your services can only be used the "https".

But that is a pretty broad topic, and details depend on the underlying framework your are using. Here is some reading for Spring/J2EE , and here with Spring and Jersey , or there for Oracle WebLogic .

Answer 2

Why not simply use jayspt library for simple encrypt or decrpyt.

Here is the source code for encrypting data:

String seedValue = "11241313xyz";
String mySecretStringshhh = "#soIsc00l123";

StandardPBEStringEncryptor stringEncryptor = new StandardPBEStringEncryptor();
stringEncryptor.setPassword(seedValue);
String encrypted= stringEncryptor.encrypt(mySecretStringshhh);

And for decryption:

StandardPBEStringEncryptor stringEncryptor = new StandardPBEStringEncryptor();
stringEncryptor.setPassword(seedValue);

String decryptedPassword = stringEncryptor.decrypt(encryptedpwdString);

Write a test case and have fun...

Further reference - http://www.jasypt.org/encrypting-passwords.html