Java PBEWithMD5AndDES

I'm using password - based encryption My initial idea was to use AES to encrypt files containing passwords Prove that password based encryption does not support AES It uses des AFAIK DES is not safe Is pbewithmd5anddes secure enough to drive my data? Or should we look for another implementation?

Solution

From your opinion, what you want to do is to use the password encryption scheme to encrypt the files containing sensitive information with the password provided by the user at decrypt time The sensitive information in this case also happens to be a password, but it is not really relevant You should update the question to make it clearer

You are doing the right thing. Your problem is that the sunjce java encryption provider does not support password based encryption AES You need to use other providers: for example, you can use the bouncy castle provider using the algorithm "pbewithsha256and128bitaes-cbc-bc" Despite his strange name, bouncy castle is very respected

As for "DES is safe enough for my data", if the data you protect is worth less than about $10000 to attackers, it may be safe enough after 2009 In 2014, if your data is worth encrypting, the answer is No