[
https://issues.apache.org/jira/browse/SLING-13341?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Konrad Windszus updated SLING-13341:
------------------------------------
Fix Version/s: Commons Crypto 1.3.0
> Use salt length of 16 byte (128 bit) by default
> -----------------------------------------------
>
> Key: SLING-13341
> URL: https://issues.apache.org/jira/browse/SLING-13341
> Project: Sling
> Issue Type: Improvement
> Components: Commons
> Reporter: Konrad Windszus
> Priority: Major
> Fix For: Commons Crypto 1.3.0
>
>
> The default salt length of {{SecureRandomSaltProvider}} should be increased
> from 8 bytes to 16 bytes to match the recommendation from [NIST Special
> Publication
> 800-132|https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
