[
https://issues.apache.org/jira/browse/KARAF-6925?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17296455#comment-17296455
]
ASF subversion and git services commented on KARAF-6925:
--------------------------------------------------------
Commit ba8f2f8686e76e6c0121e3b0b58d5858bf647556 in karaf's branch
refs/heads/karaf-4.2.x from Colm O hEigeartaigh
[ https://gitbox.apache.org/repos/asf?p=karaf.git;h=ba8f2f8 ]
KARAF-6925 - Initial attempt at supporting spring-security-crypto
(cherry picked from commit 46709caeed20b75fdfcfe062ded3dac5094961d0)
> Support stronger JAAS Encryption algorithms via spring-security-crypto
> ----------------------------------------------------------------------
>
> Key: KARAF-6925
> URL: https://issues.apache.org/jira/browse/KARAF-6925
> Project: Karaf
> Issue Type: Improvement
> Components: karaf
> Reporter: Colm O hEigeartaigh
> Assignee: Jean-Baptiste Onofré
> Priority: Major
> Labels: encryption
>
> Right now for JAAS password encryption, we only support basic digest
> algorithms, or else salted algorithms via the jasypt provider. However these
> are no longer considered secure, instead best practice is to use algorithms
> like scrypt, bcrypt, argon2, etc.
> The Spring Security Crypto project has password encoders for all of these
> algorithms, and has minimal dependencies, so we can leverage this to support
> a more modern encryption alternative.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
