(sling-org-apache-sling-commons-crypto) branch master updated: SLING-13341 Increase default salt length to 128 bit

[kw...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

kwin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-commons-crypto.git


The following commit(s) were added to refs/heads/master by this push:
     new 60c540e  SLING-13341 Increase default salt length to 128 bit
60c540e is described below

commit 60c540ee8424a5e81dc5fe43472be6ab0864c893
Author: Konrad Windszus <kw...@apache.org>
AuthorDate: Sun Sep 13 12:18:14 2026 +0200

    SLING-13341 Increase default salt length to 128 bit
    
    This matches the recommmendation from
    https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf
---
 .../commons/crypto/internal/SecureRandomSaltProviderConfiguration.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/java/org/apache/sling/commons/crypto/internal/SecureRandomSaltProviderConfiguration.java b/src/main/java/org/apache/sling/commons/crypto/internal/SecureRandomSaltProviderConfiguration.java
index fe27010..6ce1046 100644
--- a/src/main/java/org/apache/sling/commons/crypto/internal/SecureRandomSaltProviderConfiguration.java
+++ b/src/main/java/org/apache/sling/commons/crypto/internal/SecureRandomSaltProviderConfiguration.java
@@ -45,7 +45,7 @@ import org.osgi.service.metatype.annotations.ObjectClassDefinition;
         name = "Salt Length",
         description = "Length of the generated salt in bytes"
     )
-    int keyLength() default 8;
+    int keyLength() default 16;
 
     String webconsole_configurationFactory_nameHint() default "{names} {algorithm}";