Return to site

JAVA SECURE CODING: Obfuscate sensitive data

=>Snippet using SHA-256 digest

· java

You have Regulatory, Personally Identifiable Information (PII), financial, competitive advantage, and employee data in your logs that you want to obfuscate. Use this snippet:

import org.apache.commons.codec.binary.Hex;

import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;

public class ObfuscationUtil {

    public static void main(String[] args) {
        String obfuscatedData = obfuscate("vvauban@gmx.us");
        System.out.println(obfuscatedData);
    }

    private static String obfuscate(String email2Obfuscate) {
        try {
            MessageDigest digest = MessageDigest.getInstance("SHA-256");
            byte[] encodedHash = digest.digest(email2Obfuscate.getBytes(StandardCharsets.UTF_8));
            return new String(Hex.encodeHex(encodedHash));
        } catch (Exception e) {
            System.out.println(e.getMessage());
            return "";
        }
    }
}