Encryption Key / Salt

[Wee Chong Ong, modificado hace 7 años.]

In Liferay password encryption, different algorithms such as PBKDF2WithHmacSHA1/160/128000 or BCrypt can be used to hash the password. However, how is the Salt generated? Can it be configured?

How can key management infrastructure be used to manage the keys used for hashing of the passwords?

[Samuel Kong, modificado hace 7 años.]

For PBKDF2, the salt is generated using SecureRandom (I didn't dig through the code for BCrypt). The salt generation is a part of the hashing algorithm's implementation logic and is not configurable.

There's no need for a key management. "Encryption" here is a misnomer. Passwords are hashed and are not actually encrypted. So there's no need for key management.