changes pbkdf2 hash function to SHA-512

Author: kmindi

CHANGELOG.md

@@ -8,7 +8,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 ## [Unreleased]
 
 ### Changed
-- Increased PBKDF2 salt size to 32 bytes (equal to SHA-256 size)
+- Changed PBKDF2 hash function to SHA-512
+- Increased PBKDF2 salt size to 64 bytes (equal to SHA-512 size)
 - Increased PBKDF2 iterations to 10000
 
 ### Fixed

src/main/java/com/cryptoexamples/java/ExampleFileEncryptionInOneMethod.java

@@ -36,12 +36,12 @@ public static void main(String[] args) {
       String password = Base64.getEncoder().encodeToString(keyGen.generateKey().getEncoded());
 
       // GENERATE random salt
-      final byte[] salt = new byte[32];
+      final byte[] salt = new byte[64];
       SecureRandom random = SecureRandom.getInstanceStrong();
       random.nextBytes(salt);
 
       // DERIVE key (from password and salt)
-      SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA256");
+      SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA512");
       // Needs unlimited strength policy files http://www.oracle.com/technetwork/java/javase/downloads
       KeySpec keyspec = new PBEKeySpec(password.toCharArray(), salt, 10000, 256);
       SecretKey tmp = factory.generateSecret(keyspec);

src/main/java/com/cryptoexamples/java/ExampleStringEncryptionPasswordBasedInOneMethod.java

@@ -44,12 +44,12 @@ public static void main(String[] args) {
       String password = Base64.getEncoder().encodeToString(keyGen.generateKey().getEncoded());
 
       // GENERATE random salt (needed for PBKDF2)
-      final byte[] salt = new byte[32];
+      final byte[] salt = new byte[64];
       SecureRandom random = SecureRandom.getInstanceStrong();
       random.nextBytes(salt);
 
       // DERIVE key (from password and salt)
-      SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA256");
+      SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA512");
       KeySpec keyspec = new PBEKeySpec(password.toCharArray(), salt, 10000, 256);
       SecretKey tmp = factory.generateSecret(keyspec);
       SecretKey key = new SecretKeySpec(tmp.getEncoded(), "AES");