掲示板
Encryption Key / Salt
In Liferay password encryption, different algorithms such as PBKDF2WithHmacSHA1/160/128000 or BCrypt can be used to hash the password. However, how is the Salt generated? Can it be configured?
How can key management infrastructure be used to manage the keys used for hashing of the passwords?
How can key management infrastructure be used to manage the keys used for hashing of the passwords?
7年前 に Samuel Kong によって更新されました。
RE: Encryption Key / Salt
Liferay Legend 投稿: 1902 参加年月日: 08/03/10 最新の投稿
For PBKDF2, the salt is generated using SecureRandom (I didn't dig through the code for BCrypt). The salt generation is a part of the hashing algorithm's implementation logic and is not configurable.
There's no need for a key management. "Encryption" here is a misnomer. Passwords are hashed and are not actually encrypted. So there's no need for key management.
There's no need for a key management. "Encryption" here is a misnomer. Passwords are hashed and are not actually encrypted. So there's no need for key management.