bugtest001/Hard_Coded_Password/Hard_Coded_Password.java

package Hard_Coded_Password;

import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.util.logging.Logger;

import javax.crypto.BadPaddingException;
import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.NoSuchPaddingException;
import javax.crypto.spec.SecretKeySpec;

public class Hard_Coded_Password
{

	static final Logger log = Logger.getLogger("local-logger");
	
    public String bad()
    {

        String password = "Password";  // bad 纭紪鐮佸瘑鐮�
        
        return password;

    }

    
    public String good()
    {
        String data = "key"; /* init data */
        
		String sKey = "Skey";
		Cipher cipher = null;
		String pw = "";
		try {
			SecretKeySpec key = new SecretKeySpec(sKey.getBytes(), "AES");
			cipher = Cipher.getInstance("AES");
			cipher.init(Cipher.DECRYPT_MODE, key);
		}catch (NoSuchPaddingException e) {
			log.info("error");
		}catch (NoSuchAlgorithmException  e) {
			log.info("error");
		} catch (InvalidKeyException e) {
			log.info("InvalidKeyException");
		}
			
		try {
			if(cipher != null){
				pw = new String(cipher.doFinal(data.getBytes()));
			}
			
		} catch (IllegalBlockSizeException e) {
			log.info("error");
		} catch (BadPaddingException e) {
			log.info("error");
		}

		String password = pw;  // good 纭紪鐮佸瘑鐮�
		
		return password;
		       
    }
    
}