Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-5285

Re-evaluate memory/time cost parameters for 2018

    XMLWordPrintableJSON

Details

    Description

      There are some bcrypt, SCrypt, and PBKDF2 initial parameters which were determined to be secure against a default threat model given best known attacks in 2016. These should be re-evaluated for 2018.

      Administration Guide

      • Line 1303
      • Line 1311
      • Line 1321
      • Line 1637

      If these values are updated, backward-compatibility for internal uses also needs to be evaluated.

      Attachments

        Issue Links

          Activity

            People

              tmelhase Troy Melhase
              alopresto Andy LoPresto
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: