[jira] [Commented] (QPID-7035) [Java Broker] SCRAM implementation should make iteration count configurable

["ASF subversion and git services (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/QPID-7035?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15126405#comment-15126405 ] 

ASF subversion and git services commented on QPID-7035:
-------------------------------------------------------

Commit 1727954 from [~lorenz.quack] in branch 'java/trunk'
[ https://svn.apache.org/r1727954 ]

QPID-7035: [Java Broker] SCRAM implementation should make iteration count configurable

* Introduce a context variable "qpid.auth.scram.iteration_count" which defaults to 4096
* Change format passwords are stored for SCRAM adding a column for iteration count.

> [Java Broker] SCRAM implementation should make iteration count configurable
> ---------------------------------------------------------------------------
>
>                 Key: QPID-7035
>                 URL: https://issues.apache.org/jira/browse/QPID-7035
>             Project: Qpid
>          Issue Type: Improvement
>          Components: Java Broker
>    Affects Versions: qpid-java-6.0
>            Reporter: Lorenz Quack
>            Assignee: Lorenz Quack
>
> SCRAM has a iteration count parameter which is used in the PBKDF.
> In the current implementation this is set to 4096 with that number being scattered in various places of the code.
> We should make this configurable. For this to work we need to store the iteration count along with the password.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org