Vikas Kumar created RANGER-5503:
-----------------------------------
Summary: [Admin] Use stronger salt for service password
encryption/decryption
Key: RANGER-5503
URL: https://issues.apache.org/jira/browse/RANGER-5503
Project: Ranger
Issue Type: Bug
Components: admin
Reporter: Vikas Kumar
Assignee: Vikas Kumar
Ranger uses FIPS algorithm to encrypt/decrypt the service password and there it
needs to generate the salt.
In PasswordUtils.java, Although it is generating the sufficient length salt but
using only the number of bits equals to salt bye[] length.
This is working but it would be cryptographically better to use sufficient
length salt.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
