Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-867

Masked password support cryptography usage

    XMLWordPrintable

Details

    Description

      I encountered couple of issues with cryptography used for password masking:

      • implementation of masked passwords drops initialization vector (IV) randomly generated by the javax.crypto.Cipher which makes unmasking (decryption) impossible.
      • the implementation is using the same algorithm for key derivation and encryption, which is not possible as there is no encryption support in javax.crypto.Cipher for PKDBF2 family of algorithms, they are supported only in javax.crypto.SecretKeyFactory

      Attachments

        Issue Links

          blocks

          Feature Request - Feature requests from customers and/or users ELY-816 Support for masked passwords in client XML config

          • Critical - To be worked on immediately following BLOCKER issues.
          • Resolved
          is blocked by

          Bug - A problem that impairs or prevents the functions of the product. ELY-1572 japicmp force source compatibility, but only binary compatibility is required

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved
          relates to

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) ENTESB-9132 Use Elytron Credential Store in custom PersistenceManager with new felix.configadmin 1.9.0

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              aabdelsa Ashley Abdel-Sayed (Inactive)
              zregvart@redhat.com Zoran Regvart
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: