Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-11169

Default ASYM_ENCRYPT asym_keylength is considered breakable

    XMLWordPrintable

Details

    Description

      JGroups default asym_keylength is 512, however RSA keys less than 1024 bits are considered breakable (e.g. https://www.oracle.com/technetwork/java/javase/8-compatibility-guide-2156366.html )

      We should baseline the default to a secure size universally supported in our supported JDKs. Also, since JDK8 the default is 2048.

      Attachments

        Issue Links

          is caused by

          Bug - A problem that impairs or prevents the functions of the product. JGRP-2302 Default ASYM_ENCRYPT asym_keylength is considered breakable

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-15665 (7.2.z) JGRP-2302 - Default ASYM_ENCRYPT asym_keylength is considered breakable

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Activity

            People

              rhn-engineering-rhusar Radoslav Husar
              rhn-engineering-rhusar Radoslav Husar
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: