[
https://jira.jboss.org/jira/browse/JBSEAM-3763?page=com.atlassian.jira.pl...
]
Nikolay Elenkov commented on JBSEAM-3763:
-----------------------------------------
Patch implementing iteration count.
How to apply:
1. apply patches in JBSEAM-3762 first
2. main2.patch
* go to src/main/
* run patch -p0 < main.patch
3. seapspace2.patch
* go to examples/
* run patch -p0 < seamspace.patch
Make it possible to specify iteration count for salt+password
hashing
---------------------------------------------------------------------
Key: JBSEAM-3763
URL:
https://jira.jboss.org/jira/browse/JBSEAM-3763
Project: Seam
Issue Type: Feature Request
Components: Security
Environment: Seam 2.1
Reporter: Nikolay Elenkov
Assignee: Shane Bryzak
Attachments: main2.patch
The current default implementation of password hashing hashes the salt and password only
one time. Since having a number of iterations when generating the hash value is a
generally accepted security practice (Cf. PKCS#5), it would be nice if one could specify
the iteration count as a parameter to UserPassword.
Suggestion:
Add an 'iterationCount' attribute to the UserPassword annotation.
Example usage:
class User {
@UserPassword(hash="sha1", iterationCount=1000)
String getPasswordHash() {..}
}
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira