[ovirt-devel] Feature AAA JDBC password hashing

[Sven Kieske]

Well I honestly don't know
about export regulations regarding
scrypt and I'm no lawyer and can't advise on
it, but it seems there is a java implementation
for scrypt (same license as ovirt :) ):
https://github.com/wg/scrypt

Maybe you can give it a try.

As I already said, I don't know
if the SHA-256 value is enough or not.

This depends on a lot of factors, which
will differ for various users.

I just thought I bring it up here on the list.
In the end, you must decide what to do best :)

Am 24.04.2014 15:14, schrieb Alon Bar-Lev:
> We relay on what Java JCE can provide natively to avoid US export regulations issues.

-- 
Mit freundlichen Grüßen / Regards

Sven Kieske

Systemadministrator
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 6
32339 Espelkamp
T: +49-5772-293-100
F: +49-5772-293-333
https://www.mittwald.de
Geschäftsführer: Robert Meyer
St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen
Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen