X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=basic%2Fruntime%2Forg.argeo.basic.nodeps%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Futil%2Fcrypto%2FPasswordBasedEncryption.java;h=18cccd4e1271bcf964ebc45d0d8e90ccc96a0c66;hb=6bb0606505be3e99021c5ff9771c719eb1e1f2e7;hp=ab36e5d8f00e02937a6cd0d396037bf846798f88;hpb=4310414c41cc0b9e52866f81ec6c60bbf6686d16;p=lgpl%2Fargeo-commons.git

diff --git a/basic/runtime/org.argeo.basic.nodeps/src/main/java/org/argeo/util/crypto/PasswordBasedEncryption.java b/basic/runtime/org.argeo.basic.nodeps/src/main/java/org/argeo/util/crypto/PasswordBasedEncryption.java
index ab36e5d8f..18cccd4e1 100644
--- a/basic/runtime/org.argeo.basic.nodeps/src/main/java/org/argeo/util/crypto/PasswordBasedEncryption.java
+++ b/basic/runtime/org.argeo.basic.nodeps/src/main/java/org/argeo/util/crypto/PasswordBasedEncryption.java
@@ -40,10 +40,18 @@ public class PasswordBasedEncryption {
 	private final Cipher ecipher;
 	private final Cipher dcipher;
 
+	/**
+	 * This is up to the caller to clear the passed array. Neither copy of nor
+	 * reference to the passed array is kept
+	 */
 	public PasswordBasedEncryption(char[] password) {
 		this(password, DEFAULT_SALT_8, DEFAULT_IV_16);
 	}
 
+	/**
+	 * This is up to the caller to clear the passed array. Neither copies of nor
+	 * references to the passed arrays are kept
+	 */
 	public PasswordBasedEncryption(char[] password, byte[] passwordSalt,
 			byte[] initializationVector) {
 		try {