jBCrypt icon indicating copy to clipboard operation
jBCrypt copied to clipboard

StringBuffer -> StringBuilder and other modernizations

Open GlenKPeterson opened this issue 5 years ago • 1 comments

Thank you for adding a Maven project to https://github.com/djmdjm/jBCrypt

BCrypt needs to be efficient because it relies on "work" for security. If someone else can make a faster version, they can break your encryption more cheaply than you can make it. StringBuilder is a more efficient replacement for StringBuffer, so I wanted to make that change.

Using supported software is considered more secure than unsupported, so I moved us up to Java 8.

Added the Maven Enforcer plugin to make checking versions easier in the future.

Upgraded to the latest JUnit.

Added CHANGELOG.md and .gitignore files.

Basically I wanted to update things as securely as possible while changing as little as possible. What do you think?

GlenKPeterson avatar Nov 23 '20 16:11 GlenKPeterson

I ended up using Password4j which is frequently maintained.

v4ultboy avatar Oct 05 '22 14:10 v4ultboy