Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-7403

Implement salting of user passwords

XMLWordPrintable

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Salting and Hashing of user passwords will require us to provide an upgrade path for users since all existing passwords will become invalid. This change should use the atlassian-security password encode library (SEC-1)

            [BAM-7403] Implement salting of user passwords

            James Dumay added a comment -

            Hi there,

            We are happy to announce that this feature will be available in Bamboo 4.3 which is due out in the next few weeks.

            Thanks for all the comments and votes!

            Cheers,
            James Dumay
            Product Manager

            James Dumay added a comment - Hi there, We are happy to announce that this feature will be available in Bamboo 4.3 which is due out in the next few weeks. Thanks for all the comments and votes! Cheers, James Dumay Product Manager

            James Dumay added a comment -

            I've added this as a candidate to fix for 4.3.

            James Dumay added a comment - I've added this as a candidate to fix for 4.3.

            VitalyA added a comment -

            Hashing is obviously implemented, for a long time.

            VitalyA added a comment - Hashing is obviously implemented, for a long time.

            MarkC added a comment -

            Had a chat to Matt R + Matt Q., Atlassian security uses per password salting.

            MarkC added a comment - Had a chat to Matt R + Matt Q., Atlassian security uses per password salting.

            VitalyA added a comment -

            How does atlassian-security salting work? I know it uses a per-instance salt value, where is the value stored? Is it easily extractable, i.e. given a set of encrypted files, is it easy to construct a rainbow table set?

            VitalyA added a comment - How does atlassian-security salting work? I know it uses a per-instance salt value, where is the value stored? Is it easily extractable, i.e. given a set of encrypted files, is it easy to construct a rainbow table set?

              Unassigned Unassigned
              jens@atlassian.com jens
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: