return "1234567890123456"; // 16 bytes for AES
            }
        });

        // Create test cipher - use proper constructor with simple implementation
        InvertibleCryptographer cookieCipher = new InvertibleCryptographer("AES", "1234567890123456", null) {
            @Override
            public String encrypt(String plainText) {
                return "encrypted:" + plainText;
            }

        final InvertibleCryptographer inver;
        final String cipherAlgorism = fessConfig.getAppCipherAlgorism();
        if ("blowfish".equalsIgnoreCase(cipherAlgorism)) {
            inver = InvertibleCryptographer.createBlowfishCipher(fessConfig.getAppCipherKey());
        } else if ("des".equalsIgnoreCase(cipherAlgorism)) {
            inver = InvertibleCryptographer.createDesCipher(fessConfig.getAppCipherKey());

        super.setUp();

        // Create InvertibleCryptographer with AES
        invertibleCryptographer = InvertibleCryptographer.createAesCipher("1234567890123456");

        // Create OneWayCryptographer with SHA256
        oneWayCryptographer = OneWayCryptographer.createSha256Cryptographer();

        securityResourceProvider = new FessSecurityResourceProvider(invertibleCryptographer, oneWayCryptographer);
    }

import org.lastaflute.core.security.InvertibleCryptographer;
import org.lastaflute.web.servlet.cookie.CookieResourceProvider;

/**
 * The provider of cookie resource.
 *
 * @author jflute
 */
public class FessCookieResourceProvider implements CookieResourceProvider {

    protected final FessConfig harborConfig;
    protected final InvertibleCryptographer cookieCipher;

import org.lastaflute.core.security.InvertibleCryptographer;
import org.lastaflute.core.security.OneWayCryptographer;
import org.lastaflute.core.security.SecurityResourceProvider;

/**
 * The provider of security resource.
 *
 * @author jflute
 */
public class FessSecurityResourceProvider implements SecurityResourceProvider {

    protected final InvertibleCryptographer primaryInvertibleCryptographer;