[
https://issues.apache.org/jira/browse/KARAF-6925?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17296453#comment-17296453
]
ASF subversion and git services commented on KARAF-6925:
--------------------------------------------------------
Commit 0485f44eaa0241a3d05f1afe6eab9831d20f9492 in karaf's branch
refs/heads/master from Jean-Baptiste Onofré
[ https://gitbox.apache.org/repos/asf?p=karaf.git;h=0485f44 ]
Merge pull request #1259 from coheigea/KARAF-6925
KARAF-6925 - Initial attempt at supporting spring-security-crypto
> Support stronger JAAS Encryption algorithms via spring-security-crypto
> ----------------------------------------------------------------------
>
> Key: KARAF-6925
> URL: https://issues.apache.org/jira/browse/KARAF-6925
> Project: Karaf
> Issue Type: Improvement
> Components: karaf
> Reporter: Colm O hEigeartaigh
> Assignee: Jean-Baptiste Onofré
> Priority: Major
> Labels: encryption
>
> Right now for JAAS password encryption, we only support basic digest
> algorithms, or else salted algorithms via the jasypt provider. However these
> are no longer considered secure, instead best practice is to use algorithms
> like scrypt, bcrypt, argon2, etc.
> The Spring Security Crypto project has password encoders for all of these
> algorithms, and has minimal dependencies, so we can leverage this to support
> a more modern encryption alternative.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
