Class Pbkdf2ParameterValidator

java.lang.Object

com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterValidator

All Implemented Interfaces:

PasswordHashParameterValidator

public final class Pbkdf2ParameterValidator
extends Object
implements PasswordHashParameterValidator

Parameter validator for the Phase-1a PBKDF2 algorithm.

Validates iteration count, derived-key length and the base64 salt carried in the envelope. All numeric parameters are bounded by the active policy; this is the gate that prevents resource exhaustion before any KDF runs (CWE-400 / CWE-916).

The validator does not derive any key material; it only decodes the salt to verify the encoded length.

Constructor Summary

Constructors

Constructor	Description
Pbkdf2ParameterValidator()

Method Summary

Modifier and Type	Method	Description
String	algorithm()	Algorithm identifier this validator handles, matched verbatim against the alg field of the envelope.
void	validate(Map<String,String> parameters, Map<String,String> minimum, Map<String,String> maximum)	Validates the supplied parameter map against the active policy bounds.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Pbkdf2ParameterValidator

public Pbkdf2ParameterValidator()

Method Details

algorithm

public String algorithm()

Description copied from interface: PasswordHashParameterValidator

Algorithm identifier this validator handles, matched verbatim against the alg field of the envelope.

Specified by:

algorithm in interface PasswordHashParameterValidator

validate

public void validate(Map<String,String> parameters,
 Map<String,String> minimum,
 Map<String,String> maximum)

Description copied from interface: PasswordHashParameterValidator

Validates the supplied parameter map against the active policy bounds.

Specified by:

validate in interface PasswordHashParameterValidator

Parameters:

parameters - parameters as parsed from the envelope

minimum - lower bound from the active policy

maximum - upper bound from the active policy