Javadoc existing behavior

Author: garydgregory

src/main/java/org/apache/commons/codec/digest/Md5Crypt.java

@@ -105,7 +105,7 @@ public static String apr1Crypt(final byte[] keyBytes, final Random random) {
      * </p>
      *
      * @param keyBytes
-     *            plaintext string to hash.
+     *            plaintext string to hash. Each array element is set to {@code 0} before returning.
      * @param salt
      *            An APR1 salt. The salt may be null, in which case a salt is generated for you using
      *            {@link ThreadLocalRandom}; for more secure salts consider using {@link SecureRandom} to generate your
@@ -216,7 +216,7 @@ public static String md5Crypt(final byte[] keyBytes, final Random random) {
      * </p>
      *
      * @param keyBytes
-     *            plaintext string to hash.
+     *            plaintext string to hash. Each array element is set to {@code 0} before returning.
      * @param salt
      *            salt string including the prefix and optionally garbage at the end. The salt may be null, in which
      *            case a salt is generated for you using {@link ThreadLocalRandom}; for more secure salts consider using
@@ -239,7 +239,7 @@ public static String md5Crypt(final byte[] keyBytes, final String salt) {
      * </p>
      *
      * @param keyBytes
-     *            plaintext string to hash.
+     *            plaintext string to hash. Each array element is set to {@code 0} before returning.
      * @param salt
      *            real salt value without prefix or "rounds=". The salt may be null, in which case a salt
      *            is generated for you using {@link ThreadLocalRandom}; for more secure salts consider
@@ -263,7 +263,7 @@ public static String md5Crypt(final byte[] keyBytes, final String salt, final St
      * </p>
      *
      * @param keyBytes
-     *            plaintext string to hash.
+     *            plaintext string to hash. Each array element is set to {@code 0} before returning.
      * @param salt
      *            real salt value without prefix or "rounds=". The salt may be null, in which case a salt
      *            is generated for you using {@link ThreadLocalRandom}; for more secure salts consider

src/main/java/org/apache/commons/codec/digest/Sha2Crypt.java

@@ -83,7 +83,7 @@ public class Sha2Crypt {
      * </p>
      *
      * @param keyBytes
-     *            plaintext to hash
+     *            plaintext to hash. Each array element is set to {@code 0} before returning.
      * @return complete hash value
      * @throws IllegalArgumentException
      *             when a {@link java.security.NoSuchAlgorithmException} is caught.
@@ -98,7 +98,7 @@ public static String sha256Crypt(final byte[] keyBytes) {
      * See {@link Crypt#crypt(String, String)} for details.
      * </p>
      * @param keyBytes
-     *            plaintext to hash
+     *            plaintext to hash. Each array element is set to {@code 0} before returning.
      * @param salt
      *            real salt value without prefix or "rounds=". The salt may be null, in which case a salt
      *            is generated for you using {@link SecureRandom}. If one does not want to use {@link SecureRandom},
@@ -122,7 +122,7 @@ public static String sha256Crypt(final byte[] keyBytes, String salt) {
      * See {@link Crypt#crypt(String, String)} for details.
      * </p>
      * @param keyBytes
-     *            plaintext to hash
+     *            plaintext to hash. Each array element is set to {@code 0} before returning.
      * @param salt
      *            real salt value without prefix or "rounds=".
      * @param random
@@ -153,7 +153,7 @@ public static String sha256Crypt(final byte[] keyBytes, String salt, final Rando
      * </p>
      *
      * @param keyBytes
-     *            plaintext to hash
+     *            plaintext to hash. Each array element is set to {@code 0} before returning.
      * @param salt
      *            real salt value without prefix or "rounds="; may not be null
      * @param saltPrefix
@@ -556,7 +556,7 @@ private static String sha2Crypt(final byte[] keyBytes, final String salt, final
      * </p>
      *
      * @param keyBytes
-     *            plaintext to hash
+     *            plaintext to hash. Each array element is set to {@code 0} before returning.
      * @return complete hash value
      * @throws IllegalArgumentException
      *             when a {@link java.security.NoSuchAlgorithmException} is caught.
@@ -571,7 +571,7 @@ public static String sha512Crypt(final byte[] keyBytes) {
      * See {@link Crypt#crypt(String, String)} for details.
      * </p>
      * @param keyBytes
-     *            plaintext to hash
+     *            plaintext to hash. Each array element is set to {@code 0} before returning.
      * @param salt
      *            real salt value without prefix or "rounds=". The salt may be null, in which case a salt is generated
      *            for you using {@link SecureRandom}; if you want to use a {@link Random} object other than
@@ -598,7 +598,7 @@ public static String sha512Crypt(final byte[] keyBytes, String salt) {
      * See {@link Crypt#crypt(String, String)} for details.
      * </p>
      * @param keyBytes
-     *            plaintext to hash
+     *            plaintext to hash. Each array element is set to {@code 0} before returning.
      * @param salt
      *            real salt value without prefix or "rounds=". The salt may be null, in which case a salt
      *            is generated for you using {@link ThreadLocalRandom}; for more secure salts consider using