KeyDerivationWithBC.java

public class KeyDerivationWithBC {
    public SecretKey generateSecretKey(String password, byte[] salt) {
        byte[] passwordBytes = PBEParametersGenerator.PKCS5PasswordToUTF8Bytes(password.toCharArray());
        
        PKCS5S2ParametersGenerator keyGenerator = new PKCS5S2ParametersGenerator(new SHA256Digest());
        keyGenerator.init(passwordBytes, salt, 4096);
        
        byte[] keySecret = ((KeyParameter) keyGenerator.generateDerivedParameters(32)).getKey();
        
        return new SecretKeySpec(keySecret, 0, keySecret.length, "AES");
    }
    
    public byte[] generateSalt() {
        byte[] salt = new byte[32];
        (new SecureRandom()).getNextBytes(salt);
        
        return salt;
    }
}