You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Current password encryption is sub-optimal - direct RSA encryption limits password length and is poor practice cryptographically.
To Reproduce
Add an external data source (e.g. database server) with a long (50+?) character password - saving this fails semi-silently.
Expected behavior
Passwords of arbitrary length should be securely encrypted (probably using a random AES256 key, with that key in turn RSA-encrypted and stored alongside).
Screenshots
RDMP Version
All current releases.
Error with Stack Trace
If applicable, paste the entire stack trace here, leave the triple quotes (```)
Database Engine
Sql Server, Oracle, MySql or Postgres.
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered:
Fixed, new encryption uses two-stage with AES payload encryption and RSA storage of the AES key enabling essentially unlimited password/payload length.
Describe the bug
Current password encryption is sub-optimal - direct RSA encryption limits password length and is poor practice cryptographically.
To Reproduce
Add an external data source (e.g. database server) with a long (50+?) character password - saving this fails semi-silently.
Expected behavior
Passwords of arbitrary length should be securely encrypted (probably using a random AES256 key, with that key in turn RSA-encrypted and stored alongside).
Screenshots
RDMP Version
All current releases.
Error with Stack Trace
Database Engine
Sql Server, Oracle, MySql or Postgres.
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered: