Password Based Encryption

Password

Eight or more characters in the ASCII character range 0x32 through 0x126

Salt

A string of bytes added to the password to make it harder to brute force guess.

Iteration Count

The number of times a make-work transformation is applied to the password + salt to slow any automated brute force attacks.

Payload

The information to be securely protected.

---

PBEParameterSpec Class

For those using the clean room version of JCE 1.2.2 included in Bouncy Castle 155, only the 2 key and 3 key forms of the Triple-DES algorithm will work.

The SHA-1 Secure Hash Algorithm is the only message digest supported by Bouncy Castle 155 for use with the above.