Page Information

Title:	MSC62-J. Store passwords using a hash function
Author:	Matthew Wiethoff	Feb 26, 2011
Last Changed by:	Michal Rozenau	Jan 10, 2023
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/tTZGBQ
Export As:	Word · PDF

SEI CERT Oracle Coding Standard for Java (2)     Page: IDS53-J. Prevent XPath Injection     Page: FIO52-J. Do not store unencrypted sensitive information on the client side

Parent Page     Page: Rec. 49. Miscellaneous (MSC)

• security
• review-dms
• review-dm
• review-dfs
• reviewed-fwl
• sensitive
• android-applicable
• crypto
• nonnormative
• recommendation
• 1security
• msc

Time	Editor
Jan 10, 2023 06:33	Michal Rozenau	View Changes
Parasoft Jtest 2022.2
Dec 20, 2019 11:14	Matthew Churilla	View Changes
Dec 20, 2019 09:07	Robert Schiela	View Changes
Fix defects injected by editor.
Dec 20, 2019 09:03	Robert Schiela	View Changes
edits to text and NCCE's for consistency.
Dec 20, 2019 08:32	Matthew Churilla

External Links (10)
    https://www.nist.gov/itl/tig/projects/special-publication-8…
    https://www.owasp.org/index.php/Category:OWASP_Application_…
    https://docs.oracle.com/javase/7/docs/api/javax/crypto/pack…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.owasp.org/index.php/Hashing_Java#Why_add_salt_.…
    wiki.crypto.rub.de/Buch/movies.php
    docs.oracle.com/javase/7/docs/api/java/lang/String.html
    www.javapractices.com/topic/TopicAction.do?Id=216

SEI CERT Oracle Coding Standard for Java (6)     Page: Rec. AA. References     Page: Parasoft_V     Page: Java Coding Guidelines     Page: MSC59-J. Limit the lifetime of sensitive data     Page: Parasoft     Page: MSC02-J. Generate strong random numbers