Elytron Wildfly compatibility

[chadalis]

Hello,

thank you for sharing!

we are using currently PBKDF2 for Wildfly Legacy-Security. but because of Security reasons of the Legacy Subsystem we had to do a migration to Elytron. unfortunately we couldn't make it work with elytron.

is there a way to implement PBKDF2 with Elytron Wildfly?

if there is a manual or suggestion for a different module I would be really thankful!

best regards,

Chris

[m9aertner]

Hello,

have you considered the masked-PBKDF-HMAC-SHA1 ... masked-PBKDF-HMAC-SHA512 options that appear to come with WildFly Elytron? See https://docs.wildfly.org/17/WildFly_Elytron_Security.html#masked-password-types

Also, SCRAM ist available right away, as scram-sha-1 ... scram-sha-512, cf. https://docs.wildfly.org/17/WildFly_Elytron_Security.html#scram

SCRAM uses the PBKDF2 mechanism,

Unfortunately, I do not have the bandwidth to try either currently. I would be surprised if your existing secured data cannot be decoded and/or re-formatted to meet Elytron's expectations, given that the underlying crypto is all standard and not likely to differ.