spring-security/crypto
Léon van der Kaap d2248d185b
Add extra salt length check for BCrypt
If the salt length is 28 characters and the
version is 2{a,x,y}, an IndexOutOfBoundsException
is thrown. This commit adds an extra check that
the salt length should be at least 29 characters long
if the version is not equal to "2".

Fixes: gh-6907
2019-06-24 14:11:30 -06:00
..
src Add extra salt length check for BCrypt 2019-06-24 14:11:30 -06:00
spring-security-crypto.gradle crypto uses spring-jcl 2017-05-09 02:35:46 -05:00