[ http://issues.apache.org/jira/browse/DERBY-42?page=all ]

Sunitha Kambhampati updated DERBY-42:
-------------------------------------

    Description: 
When using derby database encryption,there is a provision to provide the key to 
be used for encryption as an external key. In this case the key is not stored 
in the database for added security.  

There should not be any useful information about the external key that was used 
for encrypting the database in the service.properties.
Right now, key length is stored in service.properties. This should not be 
stored in service.properties.



  was:
When using derby database encryption,there is a provision to provide the key to 
be used for encryption as an external key. In this case the key is not stored 
in the database for added security.  

There should not be any useful information about the external key that was used 
for encrypting the database in the service.properties.
Right now, key length is stored in service.properties. This should not be 
stored in service.properties.



        Version: 10.0.2.1
                     (was: 10.0.2.0)

> When using encryption, do not store the length information about the external 
> key in service.properties
> -------------------------------------------------------------------------------------------------------
>
>          Key: DERBY-42
>          URL: http://issues.apache.org/jira/browse/DERBY-42
>      Project: Derby
>         Type: Improvement
>   Components: Services
>     Versions: 10.0.2.0
>  Environment: all
>     Reporter: Sunitha Kambhampati
>     Assignee: Sunitha Kambhampati
>      Fix For: 10.0.2.1

>
> When using derby database encryption,there is a provision to provide the key 
> to be used for encryption as an external key. In this case the key is not 
> stored in the database for added security.  
> There should not be any useful information about the external key that was 
> used for encrypting the database in the service.properties.
> Right now, key length is stored in service.properties. This should not be 
> stored in service.properties.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira

Reply via email to