Problem in Password encryption

[Meet Gaurav]

HI

I have a java program that will create a property file in that I have to write the user Id and password. But the password has to be encrypted.

The java program will get the inputs from the user after running this program i will get the user id input as : ramesh
and password as : ramesh. After that I will encrypt the password and then writing into property file.

Here the problem is I want to hide or (as to show as ****)the password while the user is typing..

HOw to do this in normal java class.

[Ulf Dittmer]

Check out the javax.swing.JPasswordField class.

If you encrypt the user's password, how (and where) will you store the encryption key? You've simply transformed the problem of storing a password into the problem of storing an encryption key, which doesn't buy you much in terms of security.

[Meet Gaurav]

HI

Thanks for the reply

This is not a swing application..Basic java class. Am using a diff. logic for encryption and then saving this in a property File.

Am running this java program in command prompt and then the java program is asking for password when the user types "password" its displaying on the screen

[Ulf Dittmer]

There was a recent discussion on how to do this without Swing: https://coderanch.com/t/386342/java/java/Core-java-password-hiding

But the more important question is the one I raised in the second paragraph of my post: how will you store the encryption key?

[Meet Gaurav]

This is the Code,
System.out.print("Enter the Password");
String Password = br.readLine();

While running this asking for the password and user typed password on the command prompt its displaying on the screen

I want to hide that or simply show ****

Please advice

[Meet Gaurav]

Any possibility in Java 1.5.. Please advice

[Meet Gaurav]

Even I tried this

With the right OS you can do this:

public static void echo(boolean on) {
try {
String[] cmd = {
"/bin/sh",
"-c",
"/bin/stty " + (on ? "echo" : "-echo") + " < /dev/tty"
};
Process p = Runtime.getRuntime().exec(cmd);
p.waitFor();
}
catch (IOException e) { }
catch (InterruptedException e) { }
}


Then use echo(false) to turn off echo, and echo(true) to turn it back
on again:


BufferedReader br = new BufferedReader(new InputStreamReader(System.in));


try {
echo(false);
System.out.print("enter password: ");
String pass = br.readLine();
System.out.println();
System.out.println("you entered: " + pass);
}
finally {
echo(true);
}

[Ulf Dittmer]

Did you actually read the topic I linked to?

Also, please check your private messages.
[ October 14, 2008: Message edited by: Ulf Dittmer ]

[Meet Gaurav]

Sure will check my private message..

Is there any way to Turn off the Echo using java code...

[Rob Spoor]

Have you read the link already? It mentions System.console() which can do just that.