[
https://issues.apache.org/jira/browse/SLING-13280?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18114780#comment-18114780
]
Konrad Windszus edited comment on SLING-13280 at 9/13/26 5:20 PM:
------------------------------------------------------------------
The default configuration uses {{PBKDF2WithHmacSHA512}} with an iteration count
of
[220000|https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2]
to derive a 256 bit AES key which is used to encrypt in AES with
Galois/Counter Mode (GCM). All configuration values can be overwritten. By
default no JCA crypto service is registered (as each require an explicit OSGi
configuration).
was (Author: kwin):
The default configuration uses {{PBKDF2WithHmacSHA512}} with an iteration count
of
[220000|https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2]
to derive a 256 bit AES key which is used to encrypt with GCM. All
configuration values can be overwritten. By default no JCA crypto service is
registered (as each require an explicit OSGi configuration).
> Provide a CryptoService implementation just relying on JCA
> ----------------------------------------------------------
>
> Key: SLING-13280
> URL: https://issues.apache.org/jira/browse/SLING-13280
> Project: Sling
> Issue Type: Improvement
> Components: Commons
> Reporter: Konrad Windszus
> Assignee: Konrad Windszus
> Priority: Major
> Fix For: Commons Crypto 1.3.0
>
>
> As the only other implementation
> https://github.com/apache/sling-org-apache-sling-commons-crypto/blob/dea1d738623fa01ca78a5fd839007b4c489b6c20/src/main/java/org/apache/sling/commons/crypto/jasypt/internal/JasyptStandardPbeStringCryptoService.java
> is relying on the meanwhile no longer maintained library jasypt an
> alternative should be provided.
> Compare with the discussion at
> https://lists.apache.org/thread/qsnbfvyyt1qh3826qpsywzhzqkkxfl6p
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
