[jboss-jira] [JBoss JIRA] (JGRP-2302) Default ASYM_ENCRYPT asym_keylength is considered breakable
[
https://issues.jboss.org/browse/JGRP-2302?page=com.atlassian.jira.plugin....
]
Radoslav Husar moved WFLY-11192 to JGRP-2302:
---------------------------------------------
Project: JGroups (was: WildFly)
Key: JGRP-2302 (was: WFLY-11192)
Component/s: (was: Clustering)
Affects Version/s: 4.0.15
(was: 14.0.0.Final)
Fix Version/s: (was: 15.0.0.Alpha1)
Default ASYM_ENCRYPT asym_keylength is considered breakable
-----------------------------------------------------------
Key: JGRP-2302
URL: https://issues.jboss.org/browse/JGRP-2302
Project: JGroups
Issue Type: Bug
Affects Versions: 4.0.15
Reporter: Radoslav Husar
Assignee: Radoslav Husar
Priority: Major
JGroups default asym_keylength is 512, however RSA keys less than 1024 bits are
considered breakable (e.g.
https://www.oracle.com/technetwork/java/javase/8-compatibility-guide-2156... )
We should baseline the default to a secure size universally supported in our supported
JDKs. Also, since JDK8 the default is 2048.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)