[ https://issues.apache.org/jira/browse/MYFACES-4728?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18011486#comment-18011486 ]
Volodymyr Siedlecki commented on MYFACES-4728: ---------------------------------------------- I haven't closed the other issue out as it's still in progress. I will close this as a duplicate. > Update Other Pseudo-Random Number Generators to SHA256DRBG & Create FallBacks > ----------------------------------------------------------------------------- > > Key: MYFACES-4728 > URL: https://issues.apache.org/jira/browse/MYFACES-4728 > Project: MyFaces Core > Issue Type: Bug > Reporter: Volodymyr Siedlecki > Priority: Major > > We should increase security by using "SHA256DRBG", such as in the > TokenGenerator class. > Additionally, I realized that SHA256DRBG is not available in every JDK, so we > will need to use fallbacks. I will update my changes from MYFACES-4726. > Any Objections? -- This message was sent by Atlassian Jira (v8.20.10#820010)