JBCrypto.java

/*
 jBilling - The Enterprise Open Source Billing System
 Copyright (C) 2003-2011 Enterprise jBilling Software Ltd. and Emiliano Conde

 This file is part of jbilling.

 jbilling is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published by
 the Free Software Foundation, either version 3 of the License, or
 (at your option) any later version.

 jbilling is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU Affero General Public License for more details.

 You should have received a copy of the GNU Affero General Public License
 along with jbilling.  If not, see <http://www.gnu.org/licenses/>.
 */
package com.sapienter.jbilling.common;


import java.nio.charset.Charset;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.security.spec.InvalidKeySpecException;

import org.apache.commons.codec.binary.Base64;
import org.apache.log4j.Logger;

public abstract class JBCrypto {

    protected static final Charset UTF8 = Charset.forName("UTF-8");
    public static final String PROP_SHOULD_CRYPT_CREDIT_CARDS = "credit_card_secure";
    public static final String PROP_CREDIT_CARDS_CRYPTO_PASSWORD = "credit_card_password";
    public static final String PROP_DIGEST_ALL_PASSWORDS = "password_encrypt_all";
    public static final int MIN_UNDIGESTED_ROLE = CommonConstants.TYPE_PARTNER;
    protected boolean useHexForBinary = true;
    private static JBCrypto ourCreditCardCrypto;

    public abstract String encrypt(String text);

    public abstract String decrypt(String crypted);

    public static JBCrypto getCreditCardCrypto() {
        if (ourCreditCardCrypto == null) {
            ourCreditCardCrypto = loadCreditCardCrypto();
        }
        return ourCreditCardCrypto;
    }

    public void setUseHexForBinary(boolean flag) {
        useHexForBinary = flag;
    }

    public static JBCrypto getPasswordCrypto(Integer role) {
        boolean digestAll = Boolean.parseBoolean(
                Util.getSysProp(PROP_DIGEST_ALL_PASSWORDS));

        return (digestAll || role == null || role < MIN_UNDIGESTED_ROLE) ? ONE_WAY : DUMMY;
    }

    public String digest(String input) {
        MessageDigest md5;
        try {
            md5 = MessageDigest.getInstance("MD5");
        } catch (NoSuchAlgorithmException e) {
            throw new IllegalStateException(
                    "MD5 digest is expected to be available :" + e);
        }

        byte[] hash = md5.digest(input.getBytes(UTF8));
        return useHexForBinary ? com.sapienter.jbilling.server.util.Util.binaryToString(hash) : 
                new String(Base64.encodeBase64(hash));
    }

    private static JBCrypto loadCreditCardCrypto() {
        String property = Util.getSysProp(PROP_SHOULD_CRYPT_CREDIT_CARDS);
        String password = Util.getSysProp(PROP_CREDIT_CARDS_CRYPTO_PASSWORD);
        boolean shouldCrypt = Boolean.parseBoolean(property) && password != null && password.length() != 0;

        JBCrypto result = DUMMY;
        if (shouldCrypt) {
            try {
                result = new JBCryptoImpl(password);
            } catch (InvalidKeySpecException e) {
                Logger.getLogger(JBCrypto.class).error("Can not use suggested credit card password. " +
                        password + " Encryption won't be used", e);
            }
        }

        return result;
    }
    public static JBCrypto DUMMY = new JBCrypto() {

        public String encrypt(String text) {
            return text;
        }

        public String decrypt(String crypted) {
            return crypted;
        }
    };
    private static JBCrypto ONE_WAY = new JBCrypto() {

        public String encrypt(String text) {
            return digest(text);
        }

        public String decrypt(String crypted) {
            throw new UnsupportedOperationException("I am one way digets only");
        }
    };
}