Andrea Cosentino created CAMEL-23185:
----------------------------------------

             Summary: Post-Quantum Cryptography (PQC) readiness: camel-as2: 
Upgrade test RSA keys from 1024-bit to 2048-bit
                 Key: CAMEL-23185
                 URL: https://issues.apache.org/jira/browse/CAMEL-23185
             Project: Camel
          Issue Type: Improvement
          Components: camel-as2
            Reporter: Andrea Cosentino
            Assignee: Andrea Cosentino
             Fix For: 4.19.0


Multiple AS2 test classes generate RSA key pairs with a 1024-bit key size via 
{{KeyPairGenerator.initialize(1024, ...)}}.  RSA-1024 has been considered 
cryptographically insufficient since [NIST deprecated it in 
2013|https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf]
 and is rejected by many modern TLS stacks and security scanners. While these 
are test-only keys, they set a poor baseline and may cause failures in hardened 
CI environments that enforce minimum key lengths.

This issue is to track the upgrades of all RSA key generation in the AS2 test 
suites from 1024-bit to 2048-bit.




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to