Crypto-Agility for Data Storage

Several of the cores now support crypto agility.

Each core uses a set of parameters in the eftlinkserver.json for OPIRetail and PayByLink core.

"dataStore": {

"_comment": "used for encryption of sensitive configuration values for supported cores",

"hashingIterations": 10000,

"hashingByteSize": 384,

"hashingAlgorithm": "PBKDF2WithHmacSHA512",

"keyAlgorithm": "AES",

"keySize": 256

}

#############################

or in the core properties configuration file for the remaining cores requiring secure storage:

crypto.keygenType = AES

crypto.cipherType = AES/GCM/NoPadding

crypto.keySize = 128

crypto.hashbyteSize = 384

crypto.iterations = 100000

crypto.factoryinstance = PBKDF2WithHmacSHA512

crypto.secretkeyspec = AES

crypto.keystoretype = JKS

Currently shipping with the default settings above.

A mechanism has been provided to change the algorithm by running a command from the prompt to recreate the storage with the provided configuration. Full details of crypto-agility commends for each core is included in the Oracle Retail EFTLink Core Configuration Guide.