Just out of curiosity, in case I am playing with web services, and am tasked with a password reset web service, the data type passwords must be is a base-64. Is this the same standard that the ARS uses? I am not tasked with this yet but if we really explore all possible options after getting basic web services working that we are attempting, I see this coming up somewhere in the future..
Joe From: Easter, David Sent: Friday, June 01, 2012 6:10 PM Newsgroups: public.remedy.arsystem.general To: arslist@ARSLIST.ORG Subject: Re: bmc 7.6.04 sp3 main tool (encryption) ** It’s not for passwords, no. It’s over-the-wire encryption of the API. Performance is AES-128 Premium is AES-256 -David J. Easter Manager of Product Management, AR System BSM & Atrium Solutions Management BMC Software, Inc. The opinions, statements, and/or suggested courses of action expressed in this E-mail do not necessarily reflect those of BMC Software, Inc. My voluntary participation in this forum is not intended to convey a role as a spokesperson, liaison or public relations representative for BMC Software, Inc. From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of patrick zandi Sent: Friday, June 01, 2012 10:51 AM To: arslist@ARSLIST.ORG Subject: Re: bmc 7.6.04 sp3 main tool (encryption) ** So the basic is the DES, then the paid for products take over correct? The Password is this correct? So "Performance" aes-128 and "Premium" AES-256 Thanks Dave, you always come through.. On Fri, Jun 1, 2012 at 1:42 PM, Easter, David <david_eas...@bmc.com> wrote: ** Encryption that meets FIPS 140-2 requirements is available once you’ve loaded the Performance (providing AES-128) or Premium (AES-256) Encryption add-on product. -David J. Easter Manager of Product Management, AR System BSM & Atrium Solutions Management BMC Software, Inc. The opinions, statements, and/or suggested courses of action expressed in this E-mail do not necessarily reflect those of BMC Software, Inc. My voluntary participation in this forum is not intended to convey a role as a spokesperson, liaison or public relations representative for BMC Software, Inc. From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of patrick zandi Sent: Friday, June 01, 2012 10:39 AM To: arslist@ARSLIST.ORG Subject: bmc 7.6.04 sp3 main tool (encryption) ** While I do like it has an encryption tab, this is not FIPS 140-3 compliant , DES? is the only encryption.. This makes me nervous, as I thought the rest of the system was much higher.. Can I get an explanation of the simple encryption, and why? DES\:b887ddcfd4ab1bb702f6f9470160bdf47239175230d82df74fea1558ca854bf6 <-- lets see how fast someone can crack this. -- Patrick Zandi _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"
