[ 
https://issues.apache.org/jira/browse/CAMEL-23185?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Andrea Cosentino resolved CAMEL-23185.
--------------------------------------
    Resolution: Fixed

> Post-Quantum Cryptography (PQC) readiness: camel-as2: Upgrade test RSA keys 
> from 1024-bit to 2048-bit
> -----------------------------------------------------------------------------------------------------
>
>                 Key: CAMEL-23185
>                 URL: https://issues.apache.org/jira/browse/CAMEL-23185
>             Project: Camel
>          Issue Type: Improvement
>          Components: camel-as2
>            Reporter: Andrea Cosentino
>            Assignee: Andrea Cosentino
>            Priority: Minor
>             Fix For: 4.19.0
>
>
> Multiple AS2 test classes generate RSA key pairs with a 1024-bit key size via 
> {{KeyPairGenerator.initialize(1024, ...)}}.  RSA-1024 has been considered 
> cryptographically insufficient since [NIST deprecated it in 
> 2013|https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf]
>  and is rejected by many modern TLS stacks and security scanners. While these 
> are test-only keys, they set a poor baseline and may cause failures in 
> hardened CI environments that enforce minimum key lengths.
> This issue is to track the upgrades of all RSA key generation in the AS2 test 
> suites from 1024-bit to 2048-bit.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to