[
https://issues.apache.org/jira/browse/ARTEMIS-4966?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Timothy A. Bish closed ARTEMIS-4966.
------------------------------------
Resolution: Incomplete
Requested feedback from the reporter never received
> Using the Cipher cipher with the Blowfish algorithm in default mode does not
> provide data integrity.
> ----------------------------------------------------------------------------------------------------
>
> Key: ARTEMIS-4966
> URL: https://issues.apache.org/jira/browse/ARTEMIS-4966
> Project: ActiveMQ Artemis
> Issue Type: Bug
> Reporter: Suhov Roman
> Priority: Minor
>
> File:
> https://github.com/apache/activemq-artemis/blob/main/artemis-commons/src/main/java/org/apache/activemq/artemis/utils/DefaultSensitiveStringCodec.java
> line: 166 - 204
> Using Cipher with the Blowfish algorithm in its default mode does not provide
> data integrity. The Blowfish algorithm only provides data confidentiality,
> not integrity, which means that the data may differ when decoded from when it
> was encrypted.
> Modifications to the encode and decode methods can be made to implement data
> integrity control using HMAC.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
