Issue
-
Which algorithms are used as part of cryptography in standard Liferay implementation?
-
What is key rotation approach?
Environment
- Liferay DXP 7.1
Resolution
- Liferay DXP and Liferay Portal utilize industry-standard, government-grade encryption technologies, including advanced algorithms such as AES, 3-DES, and RSA.
- Additionally, they ship with robust user management and security features including password policies, user reminder settings, complete login security procedures, and other varying layers of security controls that allow customizable access to sensitive information.
- The default algorithm is PBKDF2WithHmacSHA1/160/128000, generating 160-bit hashes using 128,000 rounds.
- This can be overridden to use different ones, for example:
passwords.encryption.algorithm=BCRYPT/10
passwords.encryption.algorithm=MD2
passwords.encryption.algorithm=MD5
passwords.encryption.algorithm=NONE
passwords.encryption.algorithm=SHA
passwords.encryption.algorithm=SHA-256
passwords.encryption.algorithm=SHA-384
passwords.encryption.algorithm=SSHA
passwords.encryption.algorithm=UFC-CRYPT
- Key rotation is the customers' procedure, Liferay does not have overview of this.
Additional Information