Decryption fails on Mac

[Sud Umm]

If I encrypt a string using some algorithm and javax.crypto API, I cannot decrypt it on Mac. I guess it has something to do with the encoding.
Any solution for this?

Thanks.

Code:

    private static final String DEFAULT_SECRET_KEY = "abcdef";
    private static final String DEFAULT_ALGORITHM = "Blowfish";
    private static final String UNICODE_FORMAT = "UTF-8";

    public static String encrypt(String password) throws Exception {

        KeyGenerator keygen = KeyGenerator.getInstance(DEFAULT_ALGORITHM);
        keygen.init(new SecureRandom(DEFAULT_SECRET_KEY.getBytes(UNICODE_FORMAT)));
        byte[] keyBytes = keygen.generateKey().getEncoded();
        SecretKeySpec specKey = new SecretKeySpec(keyBytes, DEFAULT_ALGORITHM);

        Cipher encryptCipher = Cipher.getInstance(DEFAULT_ALGORITHM);
        encryptCipher.init(Cipher.ENCRYPT_MODE, specKey);

        byte[] cryptedbytes = encryptCipher.doFinal(password.getBytes(UNICODE_FORMAT));
        String result = (new BASE64Encoder()).encode(cryptedbytes);

        return result;
    }

    public static String decrypt(String password) throws Exception {

        KeyGenerator keygen = KeyGenerator.getInstance(DEFAULT_ALGORITHM);
        keygen.init(new SecureRandom(DEFAULT_SECRET_KEY.getBytes(UNICODE_FORMAT)));
        byte[] keyBytes = keygen.generateKey().getEncoded();
        SecretKeySpec specKey = new SecretKeySpec(keyBytes, DEFAULT_ALGORITHM);

        Cipher decryptCipher = Cipher.getInstance(DEFAULT_ALGORITHM);
        decryptCipher.init(Cipher.DECRYPT_MODE, specKey);

        byte[] result = (new BASE64Decoder()).decodeBuffer(password);
        decryptCipher.init(Cipher.DECRYPT_MODE, specKey);
        byte[] decryptedbytes = decryptCipher.doFinal(result);
        password = new String(decryptedbytes, UNICODE_FORMAT);

        return password;
    }

[Sud Umm]

It works fine only on Windows platform, but not on others.

[greg stark]

Sud Umm wrote:It works fine only on Windows platform, but not on others.

You can't use SecureRandom in the way you are doing it. SecureRandom does NOT only use your seed to initialize itself, it also may seek to use other sources of entropy. This should be made clear in the Javadocs for SecureRandom; unfortunately it is not.

You should use a proper Password-based encryption (PBE) scheme.

[Maarten Bodewes]

About the exception handling: use BadPaddingException and then GeneralSecurityException - and convert at least the last one into a InvalidStateException. You can avoid the encoding exceptions by using Charset.forName() in later VM's. Note that any encoding is accepted by default, the exception normally only gets thrown if the encoding is not available; but Java specifies that "UTF-8" is ALWAYS available, so that's a bit of a moot point.