Masked passwords with PBE encryption (via script)

With option -j, passwords can be encrypted using the PBE method. In principle, this method is a secure method for password protection because the encryption uses a combination of individual values (password, salt, iteration count). When used in configuration files, however, this information must be present, otherwise a decryption is not possible.

The creation of a masked password can be controlled with the additional parameter "o" (i.e. "-jo") so that the password used is not output. So this call parameter cannot be used to mask passwords for configuration files.

The security of masked passwords is therefore comparable to that of obfuscation, i.e. low.

→ The displayed "$JB$" value can be copied directly from the console and inserted into the desired configuration file as a password. So, for example,