使用 Argon2 的 Java 密码散列

2. Java Argon2 密码散列 - Spring Security

2.1 在 Spring Security 中，我们可以使用Argon2PasswordEncoderArgon2 进行密码散列。的实现Argon2PasswordEncoder需要BouncyCastle。

 
    <dependency>
        <groupId>org.springframework.securitygroupId>
        <artifactId>spring-security-cryptoartifactId>
        <version>5.3.2.RELEASEversion>
    dependency>
 
    <dependency>
        <groupId>commons-logginggroupId>
        <artifactId>commons-loggingartifactId>
        <version>1.2version>
    dependency>
 
    <dependency>
        <groupId>org.bouncycastlegroupId>
        <artifactId>bcpkix-jdk15onartifactId>
        <version>1.65version>
    dependency>

2.2 Argon2PasswordEncoder, 内部使用和之BouncyCastle类的 API来提供 Argon2 散列。Argon2ParametersArgon2BytesGenerator

 
package org.springframework.security.crypto.argon2;
 
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.bouncycastle.crypto.generators.Argon2BytesGenerator;
import org.bouncycastle.crypto.params.Argon2Parameters;
import org.springframework.security.crypto.keygen.BytesKeyGenerator;
import org.springframework.security.crypto.keygen.KeyGenerators;
import org.springframework.security.crypto.password.PasswordEncoder;
 
public class Argon2PasswordEncoder implements PasswordEncoder {
 
      private static final int DEFAULT_SALT_LENGTH = 16;
      private static final int DEFAULT_HASH_LENGTH = 32;
      private static final int DEFAULT_PARALLELISM = 1;
      private static final int DEFAULT_MEMORY = 1 << 12;
      private static final int DEFAULT_ITERATIONS = 3;
 
      //...
 
      public Argon2PasswordEncoder(int saltLength, int hashLength,
        int parallelism, int memory, int iterations) {
 
    		this.hashLength = hashLength;
    		this.parallelism = parallelism;
    		this.memory = memory;
    		this.iterations = iterations;
 
    		this.saltGenerator = KeyGenerators.secureRandom(saltLength);
    	}
 
    	public Argon2PasswordEncoder() {
    		this(DEFAULT_SALT_LENGTH, DEFAULT_HASH_LENGTH,
          DEFAULT_PARALLELISM, DEFAULT_MEMORY, DEFAULT_ITERATIONS);
    	}
 
      @Override
    	public String encode(CharSequence rawPassword) {
    		byte[] salt = saltGenerator.generateKey();
    		byte[] hash = new byte[hashLength];
 
    		Argon2Parameters params = new Argon2Parameters.Builder(Argon2Parameters.ARGON2_id).
    				withSalt(salt).
    				withParallelism(parallelism).
    				withMemoryAsKB(memory).
    				withIterations(iterations).
    				build();
    		Argon2BytesGenerator generator = new Argon2BytesGenerator();
    		generator.init(params);
    		generator.generateBytes(rawPassword.toString().toCharArray(), hash);
 
    		return Argon2EncodingUtils.encode(hash, params);
    	}
 
      //...

2.3 此 Java 示例用于Argon2PasswordEncoder执行 Argon2 密码散列，使用默认输入：

1. 变体 =argon2id
2. Salt = 16 字节，128 位
3. 哈希长度 = 32 字节，256 位
4. 迭代 = 3
5. 内存 = 1 << 12, 或 2 ^ 12, 4096k
6. 并行度 = 1

 
package com.mkyong.crypto.password;
 
import org.springframework.security.crypto.argon2.Argon2PasswordEncoder;
 
import java.time.Instant;
import java.time.temporal.ChronoUnit;
 
public class PasswordArgon2SpringSecurity {
 
    public static void main(String[] args) {
 
        Argon2PasswordEncoder encoder = new Argon2PasswordEncoder();
 
        String password = "Hello World";
 
        Instant start = Instant.now();  // start timer
 
        String hash = encoder.encode(password);
        System.out.println(hash);
 
        // argon2 verify hash
        /*if (encoder.matches("Hello World", hash)) {
            System.out.println("match");
        }*/
 
        Instant end = Instant.now();    // end timer
 
        System.out.println(String.format(
                "Hashing took %s ms",
                ChronoUnit.MILLIS.between(start, end)
        ));
 
    }
 
}

输出

 
# 1st
$argon2id$v=19$m=4096,t=3,p=1$iurr6y6xk2X7X/YVOEQXBg$ti9/be9VgbXtJWpm1hoYyLm8V0wBGr+dxu9X+PFbpZI
Hashing took 176 ms
 
# 2nd
$argon2id$v=19$m=4096,t=3,p=1$vnOEfUC3oZ3sVBj/yKG/4g$LdVFmw9N5D49tuJiYT0LGZ8YOqYetqz5UzDyku+7PRs
Hashing took 156 ms

2.4 输入是可配置的。

 
    public Argon2PasswordEncoder(int saltLength, int hashLength, int parallelism, int memory, int iterations) {
  		this.hashLength = hashLength;
  		this.parallelism = parallelism;
  		this.memory = memory;
  		this.iterations = iterations;
 
  		this.saltGenerator = KeyGenerators.secureRandom(saltLength);
  	}

例如，

 
  // int saltLength, int hashLength, int parallelism, int memory, int iterations
  Argon2PasswordEncoder encoder = new Argon2PasswordEncoder(16, 32, 1, 65536, 10);

1. 变体 =argon2id
2. Salt = 16 字节，128 位
3. 哈希长度 = 32 字节，256 位
4. 迭代 = 10
5. 内存 = 1 << 16，或 2 ^ 16、65536k、64M
6. 并行度 = 1

Argon2PasswordEncoder不允许更改 Argon2 的变体。

3. 常见问题

3.1 Argon2推荐参数是什么？

除了 16 字节盐和 32 字节密钥长度外，其余参数取决于服务器容量。在生产服务器上运行 Argon2 密码散列，并微调迭代、线程、内存和每次调用可以承受的时间。一般来说，Argon2 认证需要 0.5ms 到 1 秒。

下载源代码

参考

• 密码哈希 Argon2
• Argon2 白皮书
• 维基百科-Argon2
• 维基百科，免费的百科全书
• 维基百科，免费的百科全书
• Argon2-JVM
• 充气城堡
• Spring Security 密码存储
• Argon2PasswordEncoder
• 密码哈希竞赛
• Java 8 – 期间和持续时间示例