[
https://issues.apache.org/jira/browse/MYFACES-4376?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Thomas Andraschko resolved MYFACES-4376.
----------------------------------------
Resolution: Fixed
> Update Cryptographic algorithm in StateUtils to a stronger version
> ------------------------------------------------------------------
>
> Key: MYFACES-4376
> URL: https://issues.apache.org/jira/browse/MYFACES-4376
> Project: MyFaces Core
> Issue Type: Improvement
> Components: General
> Affects Versions: 3.0.0-RC1, 2.3-next-M4, 4.0.0-RC1
> Reporter: Bernd Bohmann
> Assignee: Bernd Bohmann
> Priority: Major
> Fix For: 2.3-next-M5, 2.3.8, 3.0.0, 2.2.14
>
>
> Change the parameters
> org.apache.myfaces.ALGORITHM from DES to AES
> and
> org.apache.MAC_ALGORITHM from HmacSHA1 to HmacSHA256
> DES and HmacSHA1 are considered to be weak
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
