Uploaded image for project: 'JGroups'
  1. JGroups
  2. JGRP-2302

Default ASYM_ENCRYPT asym_keylength is considered breakable

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 4.0.16
    • 4.0.15
    • None

    Description

      JGroups default asym_keylength is 512, however RSA keys less than 1024 bits are considered breakable (e.g. https://www.oracle.com/technetwork/java/javase/8-compatibility-guide-2156366.html )

      We should baseline the default to a secure size universally supported in our supported JDKs. Also, since JDK8 the default is 2048.

      Attachments

        Issue Links

          causes

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-15665 (7.2.z) JGRP-2302 - Default ASYM_ENCRYPT asym_keylength is considered breakable

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Bug - A problem that impairs or prevents the functions of the product. WFLY-11169 Default ASYM_ENCRYPT asym_keylength is considered breakable

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              rhn-engineering-rhusar Radoslav Husar
              rhn-engineering-rhusar Radoslav Husar
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: