jsp加密数据库

import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec;
import java.util.Base64;

public class AESUtil {
    private static final String ALGORITHM = "AES";
    private static final String TRANSFORMATION = "AES/ECB/PKCS5Padding";

    public static String encrypt(String data, String secretKey) throws Exception {
        SecretKeySpec keySpec = new SecretKeySpec(secretKey.getBytes(), ALGORITHM);
        Cipher cipher = Cipher.getInstance(TRANSFORMATION);
        cipher.init(Cipher.ENCRYPT_MODE, keySpec);
        byte[] encrypted = cipher.doFinal(data.getBytes());
        return Base64.getEncoder().encodeToString(encrypted);
    }

    public static String decrypt(String encryptedData, String secretKey) throws Exception {
        SecretKeySpec keySpec = new SecretKeySpec(secretKey.getBytes(), ALGORITHM);
        Cipher cipher = Cipher.getInstance(TRANSFORMATION);
        cipher.init(Cipher.DECRYPT_MODE, keySpec);
        byte[] decoded = Base64.getDecoder().decode(encryptedData);
        byte[] decrypted = cipher.doFinal(decoded);
        return new String(decrypted);
    }
}

<%@ page import="com.example.AESUtil" %>
<%
    String secretKey = "ThisIsASecretKey"; // 应该从安全的地方获取，而不是硬编码
    String encryptedUrl = "encrypted_database_url";
    String encryptedUser = "encrypted_database_user";
    String encryptedPassword = "encrypted_database_password";

    String url = AESUtil.decrypt(encryptedUrl, secretKey);
    String user = AESUtil.decrypt(encryptedUser, secretKey);
    String password = AESUtil.decrypt(encryptedPassword, secretKey);

    // 使用解密后的信息连接数据库
%>