Issue
How to disable/stop using DES as it possesses Security Threat.
Environment
- Liferay DXP 7.0
Resolution
Encryption keys can be used at Liferay end are:
# For more details about encryption keys, see the Java Cryptography
# Extension documentation.
#
company.encryption.algorithm=AES
#company.encryption.algorithm=Blowfish
#company.encryption.algorithm=DES
#company.encryption.algorithm=DESede
By default Liferay uses the AES encryption algorithm and the Blowfish, DES, DESede are already disabled. If you want to disable the AES as well, add the below property in portal-ext.properties:
#company.encryption.algorithm=AES