[
https://issues.apache.org/jira/browse/CAMEL-23185?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrea Cosentino resolved CAMEL-23185.
--------------------------------------
Resolution: Fixed
> Post-Quantum Cryptography (PQC) readiness: camel-as2: Upgrade test RSA keys
> from 1024-bit to 2048-bit
> -----------------------------------------------------------------------------------------------------
>
> Key: CAMEL-23185
> URL: https://issues.apache.org/jira/browse/CAMEL-23185
> Project: Camel
> Issue Type: Improvement
> Components: camel-as2
> Reporter: Andrea Cosentino
> Assignee: Andrea Cosentino
> Priority: Minor
> Fix For: 4.19.0
>
>
> Multiple AS2 test classes generate RSA key pairs with a 1024-bit key size via
> {{KeyPairGenerator.initialize(1024, ...)}}. RSA-1024 has been considered
> cryptographically insufficient since [NIST deprecated it in
> 2013|https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf]
> and is rejected by many modern TLS stacks and security scanners. While these
> are test-only keys, they set a poor baseline and may cause failures in
> hardened CI environments that enforce minimum key lengths.
> This issue is to track the upgrades of all RSA key generation in the AS2 test
> suites from 1024-bit to 2048-bit.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)