[
https://issues.apache.org/jira/browse/SLING-13341?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Konrad Windszus resolved SLING-13341.
-------------------------------------
Resolution: Fixed
Fixed in
https://github.com/apache/sling-org-apache-sling-commons-crypto/commit/60c540ee8424a5e81dc5fe43472be6ab0864c893.
> Use salt length of 16 byte (128 bit) by default
> -----------------------------------------------
>
> Key: SLING-13341
> URL: https://issues.apache.org/jira/browse/SLING-13341
> Project: Sling
> Issue Type: Improvement
> Components: Commons
> Reporter: Konrad Windszus
> Assignee: Konrad Windszus
> Priority: Major
> Fix For: Commons Crypto 1.3.0
>
>
> The default salt length of {{SecureRandomSaltProvider}} should be increased
> from 8 bytes to 16 bytes to match the recommendation from [NIST Special
> Publication
> 800-132|https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
