Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-3104

Use a random salt for SSHA password encoding

XMLWordPrintable

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      LdapSshaPasswordEncoder uses a site-wide salt value. This is enough to prevent cracking passwords with hashes from another instance, but random salt would improve resistance to a site-wide attempt at password cracking, as well as hiding cases of password collision between users.

            [CWD-3104] Use a random salt for SSHA password encoding

            Katherine Yabut made changes -
            Workflow Original: JAC Suggestion Workflow [ 3388279 ] New: JAC Suggestion Workflow 3 [ 3630157 ]
            Status Original: RESOLVED [ 5 ] New: Closed [ 6 ]
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 [ 1391829 ] New: JAC Suggestion Workflow [ 3388279 ]
            Issue Type Original: Improvement [ 4 ] New: Suggestion [ 10000 ]
            Owen made changes -
            Workflow Original: Crowd Development Workflow v2 [ 461083 ] New: Simplified Crowd Development Workflow v2 [ 1391829 ]
            Diego Berrueta made changes -
            Remote Link New: This issue links to "Wiki Page (Extranet)" [ 38061 ]
            joe made changes -
            Fix Version/s New: 2.6.1 [ 30697 ]
            Resolution New: Fixed [ 1 ]
            Status Original: Technical Review [ 10028 ] New: Resolved [ 5 ]
            joe made changes -
            Status Original: In Progress [ 3 ] New: Technical Review [ 10028 ]
            joe made changes -
            Status Original: Open [ 1 ] New: In Progress [ 3 ]
            joe made changes -
            Assignee New: joe [ jwalton ]
            joe made changes -
            Link New: This issue blocks CWD-3105 [ CWD-3105 ]
            joe made changes -
            Link New: This issue relates to CWD-3095 [ CWD-3095 ]
            joe created issue -

              jwalton joe
              jwalton joe
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: