URL Encryption

Question

Hi guys!!
I think my prob is a common one, but i dint found any satisfactory answer.
Here its:
We developed a application in JSP mainly, without following MVC(surprisingly). It shows all the URL's and parameters straight forward. Which i am assigned to change, as any one can alter the URL and access things.
Now i want to use any sort of URL Encryption or Encoding. Like most of the standard sites are using some sort of URL encoding so that URL seems non-sense to the users. But i dont have any idea for that. If u guys can help in any way.
I am also interested in knowing, how much of rework will be needed, if any idea, as i mentioned we r not using any MVC, so no Controller :(.
Thanks in advance

Answer 1

***Java File:***
import java.io.IOException;
import java.io.UnsupportedEncodingException;
import java.net.URLDecoder;
import java.net.URLEncoder;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.security.spec.InvalidKeySpecException;
import java.security.spec.KeySpec;
import javax.crypto.BadPaddingException;
import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.NoSuchPaddingException;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.DESKeySpec;
public class EncryptionHelper {
private static final String PASS_PHRASE = "passphrase";
public static String encrypt(String msg){
try {
KeySpec keySpec = new DESKeySpec(PASS_PHRASE.getBytes());
SecretKey key = SecretKeyFactory.getInstance("DES").generateSecret(keySpec);
Cipher ecipher = Cipher.getInstance(key.getAlgorithm());
ecipher.init(Cipher.ENCRYPT_MODE, key);
//Encode the string into bytes using utf-8
byte[] utf8 = msg.getBytes("UTF8");
//Encrypt
byte[] enc = ecipher.doFinal(utf8);
//Encode bytes to base64 to get a string
return new sun.misc.BASE64Encoder().encode(enc);
} catch (InvalidKeyException e) {
e.printStackTrace();
} catch (InvalidKeySpecException e) {
e.printStackTrace();
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
} catch (NoSuchPaddingException e) {
e.printStackTrace();
} catch (IllegalStateException e) {
e.printStackTrace();
} catch (IllegalBlockSizeException e) {
e.printStackTrace();
} catch (BadPaddingException e) {
e.printStackTrace();
} catch (UnsupportedEncodingException e) {
e.printStackTrace();
return null;
public static String decrypt(String msg){
try {
KeySpec keySpec = new DESKeySpec(PASS_PHRASE.getBytes());
SecretKey key = SecretKeyFactory.getInstance("DES").generateSecret(keySpec);
Cipher decipher = Cipher.getInstance(key.getAlgorithm());
decipher.init(Cipher.DECRYPT_MODE, key);
// Decode base64 to get bytes
byte[] dec = new sun.misc.BASE64Decoder().decodeBuffer(msg);
//Decrypt
byte[] utf8 = decipher.doFinal(dec);
//Decode using utf-8
return new String(utf8, "UTF8");
} catch (InvalidKeyException e) {
e.printStackTrace();
} catch (InvalidKeySpecException e) {
e.printStackTrace();
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
} catch (NoSuchPaddingException e) {
e.printStackTrace();
} catch (IOException e) {
e.printStackTrace();
} catch (IllegalStateException e) {
e.printStackTrace();
} catch (IllegalBlockSizeException e) {
e.printStackTrace();
} catch (BadPaddingException e) {
e.printStackTrace();
return null;
public static String encodeURL(String url){
try {
return URLEncoder.encode(url,"UTF-8");
} catch (UnsupportedEncodingException e) {
e.printStackTrace();
return null;
Now In JSP we can write like this:
<%@page import="EncryptionHelper"%>
<%
String query = "id=101&item=22&conf=12234";
String encoded = EncryptionHelper.encodeURL(EncryptionHelper.encrypt(query));
response.sendRedirect("process.jsp?data="+encoded);
%>
Now it's Easy.. Enjoy