[KARAF-6925] Support stronger JAAS Encryption algorithms via spring-security-crypto

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.2.11, 4.3.1
• Component/s: karaf
• Labels: encryption
• Target Version/s: 4.2.11, 4.3.1
• Assignee: Jean-Baptiste Onofré
• Reporter: Colm O hEigeartaigh
• Created: 27/Nov/20 12:54
• Updated: 05/Jul/21 14:38
• Resolved: 06/Mar/21 06:05

Description

Right now for JAAS password encryption, we only support basic digest algorithms, or else salted algorithms via the jasypt provider. However these are no longer considered secure, instead best practice is to use algorithms like scrypt, bcrypt, argon2, etc.

The Spring Security Crypto project has password encoders for all of these algorithms, and has minimal dependencies, so we can leverage this to support a more modern encryption alternative.

Issue Links

• is related to: KARAF-7219 Document improved password encryption algorithms