use by default ECDH algo for encrypting keys

adorsys · Nov 28, 2023 · e2199b3 · e2199b3
1 parent cae3f85
commit e2199b3
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 6 deletions.
diff --git a/.../src/main/java/de/adorsys/datasafe/encrypiton/api/types/encryption/KeyCreationConfig.java b/.../src/main/java/de/adorsys/datasafe/encrypiton/api/types/encryption/KeyCreationConfig.java
@@ -45,26 +45,26 @@ public static class SecretKeyCreationCfg {
  public static class EncryptingKeyCreationCfg {
 
  @Builder.Default
- private final String algo = "RSA";
+ private final String algo = "ECDH";
 
  @Builder.Default
- private final int size = 2048;
+ private final int size = 256;
 
  @Builder.Default
- private final String sigAlgo = "SHA256withRSA";
+ private final String sigAlgo = "SHA256withECDSA";
  }
 
  @Getter
  @Builder
  public static class SigningKeyCreationCfg {
 
  @Builder.Default
- private final String algo = "RSA";
+ private final String algo = "ECDH";
 
  @Builder.Default
- private final int size = 2048;
+ private final int size = 256;
 
  @Builder.Default
- private final String sigAlgo = "SHA256withRSA";
+ private final String sigAlgo = "SHA256withECDSA";
  }
 }
diff --git a/datasafe-rest-impl/src/main/resources/application.properties b/datasafe-rest-impl/src/main/resources/application.properties
@@ -36,3 +36,11 @@ datasafe.encryption.keystore.pbkdf.scrypt.parallelization=1
 datasafe.encryption.keystore.pbkdf.scrypt.saltLength=16
 datasafe.encryption.keystore.macAlgo=HmacSHA3_512
 datasafe.encryption.cms.algo=AES256_GCM
+
+#datasafe.encryption.keys.encrypting.algo=RSA
+#datasafe.encryption.keys.encrypting.size=4096
+#datasafe.encryption.keys.encrypting.sigAlgo=SHA256withRSA
+
+#datasafe.encryption.keys.signing.algo=RSA
+#datasafe.encryption.keys.signing.size=4096
+#datasafe.encryption.keys.signing.sigAlgo=SHA256withRSA