Jasypt and javascript
Does anyone know how to encrypt in javascript (maybe with sjcl?), post to a webapp and decrypt with java?
I wish to intercept some of a form data, encrypt it and then post to my spring applica开发者_StackOverflow中文版tion. ? already use jasypt PBEWITHSHA256AND128BITAES-CBC-BC algorithm for database encryption.
Any client-based symmetric encryption algorithm is likely going to be hackable since the code and keys is all sitting right there in the web page.
Wouldn't it be better to just use https to deliver the data to your server (the transport will be encrypted by https) and then do whatever final encryption you want on the server before storing it or passing to your spring application?
Answering my own question: I've found the precious jCrypting javascript library (based on jquery) and developed a spring integration (https://gitorious.org/jcryptingspring)
精彩评论