Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-5285

Re-evaluate memory/time cost parameters for 2018

    Details

      Description

      There are some bcrypt, SCrypt, and PBKDF2 initial parameters which were determined to be secure against a default threat model given best known attacks in 2016. These should be re-evaluated for 2018.

      Administration Guide

      • Line 1303
      • Line 1311
      • Line 1321
      • Line 1637

      If these values are updated, backward-compatibility for internal uses also needs to be evaluated.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                tmelhase Troy Melhase
                Reporter:
                alopresto Andy LoPresto
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated: