Cryptograhic technique used in kibana session id generation

Search Guard
1

Hi,

We are using kibana 6.2.4 with kibana-searchguard plugin 6.2.4-12.

Please let us know what is the cryptographic techniques is used in generation of kibana session Id?

Thanks & Regards,
Mahesh

2

We use the hapi-auth-cookie library which unses iron to encrypt the session cookie:

···

On Thursday, August 16, 2018 at 9:04:55 AM UTC+2, Mahesh Gowda wrote:

Hi,

We are using kibana 6.2.4 with kibana-searchguard plugin 6.2.4-12.

Please let us know what is the cryptographic techniques is used in generation of kibana session Id?

Thanks & Regards,
Mahesh

3

Thanks Jochen

···

On Thursday, 16 August 2018 20:45:02 UTC+5:30, Jochen Kressin wrote:

We use the hapi-auth-cookie library which unses iron to encrypt the session cookie:

https://github.com/hueniverse/iron

On Thursday, August 16, 2018 at 9:04:55 AM UTC+2, Mahesh Gowda wrote:

Hi,

We are using kibana 6.2.4 with kibana-searchguard plugin 6.2.4-12.

Please let us know what is the cryptographic techniques is used in generation of kibana session Id?

Thanks & Regards,
Mahesh