use by default ECDH algo for encrypting keys

adorsys · Oct 26, 2023 · 4eb4c90 · 4eb4c90
1 parent fd5f52d
commit 4eb4c90
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 7 deletions.
diff --git a/.../src/main/java/de/adorsys/datasafe/encrypiton/api/types/encryption/KeyCreationConfig.java b/.../src/main/java/de/adorsys/datasafe/encrypiton/api/types/encryption/KeyCreationConfig.java
@@ -45,26 +45,26 @@ public static class SecretKeyCreationCfg {
     public static class EncryptingKeyCreationCfg {
 
         @Builder.Default
-        private final String algo = "RSA";
+        private final String algo = "ECDH";
 
         @Builder.Default
-        private final int size = 2048;
+        private final int size = 256;
 
         @Builder.Default
-        private final String sigAlgo = "SHA256withRSA";
+        private final String sigAlgo = "SHA256withECDSA";
     }
 
     @Getter
     @Builder
     public static class SigningKeyCreationCfg {
 
         @Builder.Default
-        private final String algo = "RSA";
+        private final String algo = "ECDH";
 
         @Builder.Default
-        private final int size = 2048;
+        private final int size = 256;
 
         @Builder.Default
-        private final String sigAlgo = "SHA256withRSA";
+        private final String sigAlgo = "SHA256withECDSA";
     }
 }
diff --git a/datasafe-rest-impl/src/main/resources/application.properties b/datasafe-rest-impl/src/main/resources/application.properties
@@ -36,3 +36,11 @@ datasafe.encryption.keystore.pbkdf.scrypt.parallelization=1
 datasafe.encryption.keystore.pbkdf.scrypt.saltLength=16
 datasafe.encryption.keystore.macAlgo=HmacSHA3_512
 datasafe.encryption.cms.algo=AES256_GCM
+
+#datasafe.encryption.keys.encrypting.algo=RSA
+#datasafe.encryption.keys.encrypting.size=4096
+#datasafe.encryption.keys.encrypting.sigAlgo=SHA256withRSA
+
+#datasafe.encryption.keys.signing.algo=RSA
+#datasafe.encryption.keys.signing.size=4096
+#datasafe.encryption.keys.signing.sigAlgo=SHA256withRSA
diff --git a/pom.xml b/pom.xml
@@ -119,7 +119,7 @@
         <siv-mode.version>1.4.4</siv-mode.version>
         <jackson.version>2.12.7</jackson.version>
         <jackson-databind.version>2.12.7.1</jackson-databind.version>
-        <keymanagement.version>0.0.7</keymanagement.version>
+        <keymanagement.version>0.0.8-SNAPSHOT</keymanagement.version>
         <jakarta.annotation-api.varsion>2.1.1</jakarta.annotation-api.varsion>
         <jaxb-api.version>2.3.1</jaxb-api.version>
         <maven-deploy-plugin.version>2.8.1</maven-deploy-plugin.version>