mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-06-28 09:28:55 -04:00
51b4fffb5e
API keys are high-entropy secure random strings. This means that the additional work factor of functions like PBKDF or bcrypt are not necessary, and a faster hash function like salted SHA-256 provides adequate security against offline attacks (hash collision, brute force, etc.). This PR adds `SSHA-256` to the list of supported stored hash algorithms for API key secrets, and makes it the default algorithm. Additionally, this PR changes the format of API key secrets, moving from an encoded UUID to a random string which increase the entropy of API keys from 122 bits to 128 bits, without changing overall secret length. Relates: ES-9504 |
||
|---|---|---|
| .. | ||
| images | ||
| audit-settings.asciidoc | ||
| ccr-settings.asciidoc | ||
| common-defs.asciidoc | ||
| data-stream-lifecycle-settings.asciidoc | ||
| health-diagnostic-settings.asciidoc | ||
| ilm-settings.asciidoc | ||
| inference-settings.asciidoc | ||
| license-settings.asciidoc | ||
| ml-settings.asciidoc | ||
| monitoring-settings.asciidoc | ||
| notification-settings.asciidoc | ||
| security-hash-settings.asciidoc | ||
| security-settings.asciidoc | ||
| snapshot-settings.asciidoc | ||
| ssl-settings.asciidoc | ||
| transform-settings.asciidoc | ||