[prev in list] [next in list] [prev in thread] [next in thread] 

List:       myfaces-dev
Subject:    [jira] [Resolved] (MYFACES-4376) Update Cryptographic algorithm in StateUtils to a stronger version
From:       "Thomas Andraschko (Jira)" <dev () myfaces ! apache ! org>
Date:       2021-02-08 15:18:00
Message-ID: JIRA.13353260.1611055508000.587879.1612797480671 () Atlassian ! JIRA
[Download RAW message or body]


     [ https://issues.apache.org/jira/browse/MYFACES-4376?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel \
]

Thomas Andraschko resolved MYFACES-4376.
----------------------------------------
    Resolution: Fixed

> Update Cryptographic algorithm in StateUtils to a stronger version
> ------------------------------------------------------------------
> 
> Key: MYFACES-4376
> URL: https://issues.apache.org/jira/browse/MYFACES-4376
> Project: MyFaces Core
> Issue Type: Improvement
> Components: General
> Affects Versions: 3.0.0-RC1, 2.3-next-M4, 4.0.0-RC1
> Reporter: Bernd Bohmann
> Assignee: Bernd Bohmann
> Priority: Major
> Fix For: 2.3-next-M5, 2.3.8, 3.0.0, 2.2.14
> 
> 
> Change the parameters
> org.apache.myfaces.ALGORITHM   from DES to AES
> and
> org.apache.MAC_ALGORITHM   from HmacSHA1 to HmacSHA256  
> DES and HmacSHA1 are considered to be weak
> 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


[prev in list] [next in list] [prev in thread] [next in thread]