-
Bug
-
Resolution: Done
-
Major
-
None
-
None
I encountered couple of issues with cryptography used for password masking:
- implementation of masked passwords drops initialization vector (IV) randomly generated by the javax.crypto.Cipher which makes unmasking (decryption) impossible.
- the implementation is using the same algorithm for key derivation and encryption, which is not possible as there is no encryption support in javax.crypto.Cipher for PKDBF2 family of algorithms, they are supported only in javax.crypto.SecretKeyFactory
- blocks
-
ELY-816 Support for masked passwords in client XML config
- Resolved
- is blocked by
-
ELY-1572 japicmp force source compatibility, but only binary compatibility is required
- Resolved
- relates to
-
ENTESB-9132 Use Elytron Credential Store in custom PersistenceManager with new felix.configadmin 1.9.0
- Closed