How to generate remember-me encryptionKey and validationKey

I have successfully configured SecurityFilter with the
remember-me login configuration as shown in the example
configuration file
[securityfilter-2.0-src\web\rememberme\WEB-INF\securityfilter-config.xml].

Now I would like to know how I create custom keys for my
application. Obviously using the default keys provided in
the example is not secure, however I cannot find any
documentation or mailing list topics with instructions on
how to generate encryptionKey and validationKeys.


I have included my remember-me login configuration for
reference:

<remember-me
className="org.securityfilter.authenticator.persistent.DefaultPersistentLoginManager">
	<remember-me-param name="cookieLife" value="15" />
	<remember-me-param name="protection" value="all" />
	<remember-me-param name="useIP" value="false" />
	<remember-me-param name="encryptionAlgorithm"
		value="DES" />
	<remember-me-param name="encryptionMode" value="ECB" />
	<remember-me-param name="encryptionPadding"
		value="PKCS5Padding" />
	<!-- encryption keys; customize for each application -->
	<!-- NOTE: these kys must be speciied AFTER other
encryption settings -->
	<remember-me-param name="validationKey"
		value="347382902489402489754895734890347" />
	<remember-me-param name="encryptionKey"
		value="347892347028490237487846240673842" />
</remember-me>


Regards,
Warner

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642