ph security

A Java library with shared security aspects: authentication, certificates, keystores, CRL/OCSP, message digests, MACs and password hashing.

This library is independent of BouncyCastle - see ph-bc for BouncyCastle specifics.

Highlights:

• KeyStoreHelper / KeyStoreDescriptorBuilder / TrustStoreDescriptorBuilder - keystore and truststore handling
• CertificateHelper / CertificateDecodeHelper - certificate utilities
• TrustedCAChecker - CA certificate validation
• CRLHelper / CRLCache / CRLDownloader - CRL handling and caching
• RevocationCheckBuilder - fluent builder for OCSP/CRL revocation checks
• BCrypt / PasswordHashCreatorBCrypt / PasswordHashCreatorPBKDF2_SHA256_1000_48 - password hashing
• VerySecureRandom - cryptographically secure random number generation
• AuthToken / AuthTokenRegistry / AuthIdentificationManager - token-based authentication
• EMessageDigestAlgorithm / EMacAlgorithm - algorithm enums

Maven usage

Add the following to your pom.xml to use this artifact:

<dependency>
  <groupId>com.helger.commons</groupId>
  <artifactId>ph-security</artifactId>
  <version>x.y.z</version>
</dependency>