Crypto

Compare two signed tokens

Constant time equals method.

Given a length that both Strings are equal to, this method will always run in constant time. This prevents timing attacks.

Extract a signed token that was signed by play.api.libs.Crypto.signToken.

Generates a signed token.

Generates a cryptographically secure token.

Signs (MAC) the given String using the application’s secret key.

By default this uses the platform default JCE provider. This can be overridden by defining play.crypto.provider in application.conf.

Signs (MAC) the given String using the given secret key.

By default this uses the platform default JCE provider. This can be overridden by defining play.crypto.provider in application.conf.

Sign a token. This produces a new token, that has this token signed with a nonce.

This primarily exists to defeat the BREACH vulnerability, as it allows the token to effectively be random per request, without actually changing the value.

Decrypt a String with the AES encryption standard.

The private key must have a length of 16 bytes.

The provider used is by default this uses the platform default JSSE provider. This can be overridden by defining play.crypto.provider in application.conf.

The transformation used is by default AES/CTR/NoPadding. It can be configured by defining play.crypto.aes.transformation in application.conf. Although any cipher transformation algorithm can be selected here, the secret key spec used is always AES, so only AES transformation algorithms will work.

Decrypt a String with the AES encryption standard using the application's secret key.

The provider used is by default this uses the platform default JSSE provider. This can be overridden by defining play.crypto.provider in application.conf.

The transformation used is by default AES/CTR/NoPadding. It can be configured by defining play.crypto.aes.transformation in application.conf. Although any cipher transformation algorithm can be selected here, the secret key spec used is always AES, so only AES transformation algorithms will work.

Encrypt a String with the AES encryption standard and the supplied private key.

The provider used is by default this uses the platform default JSSE provider. This can be overridden by defining play.crypto.provider in application.conf.

The transformation algorithm used is the provider specific implementation of the AES name. On Oracles JDK, this is AES/CTR/NoPadding. This algorithm is suitable for small amounts of data, typically less than 32 bytes, hence is useful for encrypting credit card numbers, passwords etc. For larger blocks of data, this algorithm may expose patterns and be vulnerable to repeat attacks.

The transformation algorithm can be configured by defining play.crypto.aes.transformation in application.conf. Although any cipher transformation algorithm can be selected here, the secret key spec used is always AES, so only AES transformation algorithms will work.

Encrypt a String with the AES encryption standard using the application's secret key.

The provider used is by default this uses the platform default JSSE provider. This can be overridden by defining play.crypto.provider in application.conf.

The transformation algorithm used is the provider specific implementation of the AES name. On Oracles JDK, this is AES/CTR/NoPadding. This algorithm is suitable for small amounts of data, typically less than 32 bytes, hence is useful for encrypting credit card numbers, passwords etc. For larger blocks of data, this algorithm may expose patterns and be vulnerable to repeat attacks.

The transformation algorithm can be configured by defining play.crypto.aes.transformation in application.conf. Although any cipher transformation algorithm can be selected here, the secret key spec used is always AES, so only AES transformation algorithms will work.