Does anyone know of a way to get a 256 bit key value generated from a pass phrase of any length? The encryption cannot be salted as the encrypted values need to be generated again and compared in the database. So a value must generate the same encrypted string each time it is encrypted.
AES-256 Encryption with Java and JCEKS. If you are planning on using AES 256-bit. Vector as a parameter unlike the encryption process generating a random IV.

We will need some kind of salt and hashing function to convert a password to the desired key. However, let's assume the password is automatically generated for every file anyway. This means that we can theoretically skip the salt and hash (e.g. Pbkdf2), and just generate a random 256 bit key and 128 bit iv. Feb 08, 2017 Specifically when dealing with the encryption and decryption of credentials within Powershell (next blog post), you will be dealing with AES keys to handle this securely. Notes AES encryption only supports 128-bit (16 bytes), 192-bit (24 bytes) or 256-bit key (32 bytes) lengths.

Perfect Passwords GRC's Ultra High Security Password Generator
2,618 sets of passwords generated per day 33,542,702 sets of passwords generated for our visitors

DETECT “SECURE” CONNECTION INTERCEPTION with GRC's NEW HTTPS fingerprinting service!!

Generating long, high-quality random passwords is
not simple. So here is some totally random raw
material, generated just for YOU, to start with.

Every time this page is displayed, our server generates a unique set of custom, high quality, cryptographic-strength password strings which are safe for you to use:

64 random hexadecimal characters (0-9 and A-F):

79DAE40CEB6E5C76453F18FAA49FF91828864737ED4ECB8BD3363609707740A9

63 random printable ASCII characters:

LqvG5HL5pmn:YR<D>PVtU0aqRY*d*z.p($2b#&|tNCSPI*4!Xo4RC_W^|Lqk

63 random alpha-numeric characters (a-z, A-Z, 0-9):

uNgjw4FhqCRmNuyAFGESmhloUqgbJO7Kx8eF0vRfiXbyp4L1lQ1rgH657CIXYCE

Click your web browser's 'refresh' button a few times and watch the password strings change each time.

What makes these perfect and safe?
Every one is completely random (maximum entropy) without any pattern, and the cryptographically-strong pseudo random number generator we use guarantees that no similar strings will ever be produced again.

Also, because this page will only allow itself to be displayed over a snoop-proof and proxy-proof high-security SSL connection, and it is marked as having expired back in 1999, this page which was custom generated just now for you will not be cached or visible to anyone else.

Therefore, these password strings are just for you. No one else can ever see them or get them. You may safely take these strings as they are, or use chunks from several to build your own if you prefer, or do whatever you want with them. Each set displayed are totally, uniquely yours — forever.

The 'Application Notes' section below discusses various aspects of using these random passwords for locking down wireless WEP and WPA networks, for use as VPN shared secrets, as well as for other purposes.

The 'Techie Details' section at the end describes exactly how these super-strong maximum-entropy passwords are generated (to satisfy the uber-geek inside you).

Application Notes:

A note about 'random' and 'pseudo-random' terminology:
Throughout this page I use the shorthand term 'random' instead of the longer but more precise term 'pseudo-random'. I use the output of this page — myself — for any purpose, without hesitation, any time I need a chunk of randomness because there is no better place to find anything more trusted, random and safe. The 'pseudo-randomness' of these numbers does not make them any less good.

There are ways to generate absolutely random numbers, but computer algorithms cannot be used for that, since, by definition, no deterministic mathematical algorithm can generate a random result. Electrical and mechanical noise found in chaotic physical systems can be tapped and used as a source of true randomness, but this is much more than is needed for our purposes here. High quality algorithms are sufficient.

The deterministic binary noise generated by my server, which is then converted into various displayable formats, is derived from the highest quality mathematical pseudo-random algorithms known. In other words, these password strings are as random as anything non-random can be.

This page's password 'raw material':
The raw password material is provided in several formats to support its use in many different applications. Each of the password strings on the page is generated independently of every other, based upon its own unique pseudo-random binary data. So there is no underlying similarity in the data among the various format passwords.

64 hex characters = 256 binary bits:

C60AFBD16F803EF892303722A0DDBC4C516B68FD9F3847E0CBEDB8AB731113AA

Each of the 64 hexadecimal characters encodes 4 bits of binary data, so the entire 64 characters is equivalent to 256 binary bits — which is the actual binary key length used by the WiFi WPA pre-shared key (PSK). Some WPA-PSK user interfaces

Generate Random 256 Bit Aes Key