[ https://issues.apache.org/jira/browse/MYFACES-4376?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Thomas Andraschko resolved MYFACES-4376. ---------------------------------------- Resolution: Fixed > Update Cryptographic algorithm in StateUtils to a stronger version > ------------------------------------------------------------------ > > Key: MYFACES-4376 > URL: https://issues.apache.org/jira/browse/MYFACES-4376 > Project: MyFaces Core > Issue Type: Improvement > Components: General > Affects Versions: 3.0.0-RC1, 2.3-next-M4, 4.0.0-RC1 > Reporter: Bernd Bohmann > Assignee: Bernd Bohmann > Priority: Major > Fix For: 2.3-next-M5, 2.3.8, 3.0.0, 2.2.14 > > > Change the parameters > org.apache.myfaces.ALGORITHM from DES to AES > and > org.apache.MAC_ALGORITHM from HmacSHA1 to HmacSHA256 > DES and HmacSHA1 are considered to be weak > -- This message was sent by Atlassian Jira (v8.3.4#803005)