Security Hash Algorithm

I’m being asked what the security hash algorithm provided by SG. Is it sha256, or sha384? Is there a place in the code I can point our BU folks to?

It's bcrypt (https://github.com/floragunncom/search-guard/blob/master/src/main/java/com/floragunn/searchguard/auth/internal/InternalAuthenticationBackend.java#L105\) for the intenal user backend as well as
SHA 256 (https://github.com/floragunncom/search-guard/blob/master/src/main/java/com/floragunn/searchguard/user/AuthCredentials.java#L75\) for in memory cache

···

Am 31.01.2017 um 19:36 schrieb jcantril@redhat.com:

I'm being asked what the security hash algorithm provided by SG. Is it sha256, or sha384? Is there a place in the code I can point our BU folks to?

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/7f08c578-3be2-4940-8c95-63c186837064%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.