[jira] [Commented] (OFBIZ-8537) LoginWorker HashCrypt the type of hash for one-way encryption

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Commented] (OFBIZ-8537) LoginWorker HashCrypt the type of hash for one-way encryption

Nicolas Malin (Jira)

    [ https://issues.apache.org/jira/browse/OFBIZ-8537?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15721786#comment-15721786 ]

Michael Brohl commented on OFBIZ-8537:
--------------------------------------

Hi [~wangjunyuan], [~shi.jinghai],

thanks for your contributions!

I briefly reviewed the patch and think that we should change back the change of the demo data flexadmin password. The encryption configuration is still SHA (as it should be for backwards compatibility) and the demo data should be consistent with the configuration.

If you want to provide an example for PBKDF2 I'd suggest to put it in the documentation or as a comment in the demo data.

Thanky,
Michael

> LoginWorker HashCrypt the type of hash for one-way encryption
> -------------------------------------------------------------
>
>                 Key: OFBIZ-8537
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-8537
>             Project: OFBiz
>          Issue Type: New Feature
>          Components: framework
>    Affects Versions: Trunk
>            Reporter: wangjunyuan
>            Assignee: Shi Jinghai
>            Priority: Minor
>              Labels: HashCrypt, PBKDF2, security.properties
>         Attachments: HashCrypt.patch
>
>
> PBKDF2 (Password-Based Key Derivation Function 2) is part of RSA Laboratories' Public-Key Cryptography Standards (PKCS) series, specifically PKCS #5 v2.0, also published as Internet Engineering Task Force's RFC 2898. It replaces an earlier key derivation function, PBKDF1, which could only produce derived keys up to 160 bits long.Add this function to ofbiz ,this PBKDF2 has four types in Javaļ¼š'PBKDF2WithHmacSHA1','PBKDF2WithHmacSHA256','PBKDF2WithHmacSHA384','PBKDF2WithHmacSHA512'



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)