Skip to content

Strengthen encryption for elasticsearch-keystore tool to AES 256#119749

Merged
mosche merged 3 commits intoelastic:mainfrom
mosche:v9/ES-10419-AES-256
Jan 9, 2025
Merged

Strengthen encryption for elasticsearch-keystore tool to AES 256#119749
mosche merged 3 commits intoelastic:mainfrom
mosche:v9/ES-10419-AES-256

Conversation

@mosche
Copy link
Contributor

@mosche mosche commented Jan 8, 2025

The latest format version (7) of KeyStoreWrapper will be using a 256 bits key for the AES cipher.

Closes ES-10419

The latest format version (7) of KeyStoreWrapper will be using a 256
bits key for the AES cipher.

Closes #ES-10419
@mosche mosche requested a review from a team as a code owner January 8, 2025 11:18
@elasticsearchmachine elasticsearchmachine added needs:triage Requires assignment of a team area label v9.0.0 labels Jan 8, 2025
@mosche mosche added :Core/Infra/CLI CLI utilities, scripts, and infrastructure and removed needs:triage Requires assignment of a team area label labels Jan 8, 2025
@elasticsearchmachine elasticsearchmachine added the Team:Core/Infra Meta label for core/infra team label Jan 8, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-core-infra (Team:Core/Infra)

@elasticsearchmachine
Copy link
Collaborator

Hi @mosche, I've created a changelog YAML for you.

Copy link
Member

@rjernst rjernst left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. I wonder if we should also backport to 8.x? 128 was a restriction for Java 8, which was 7.x.

@mosche mosche added v8.18.0 auto-backport Automatically create backport pull requests when merged labels Jan 8, 2025
@mosche mosche merged commit 16d8aaf into elastic:main Jan 9, 2025
@elasticsearchmachine
Copy link
Collaborator

💚 Backport successful

Status Branch Result
8.x
mosche added a commit to mosche/elasticsearch that referenced this pull request Jan 9, 2025
…stic#119749)

The latest format version (7) of KeyStoreWrapper will be using a 256
bits key for the AES cipher.

Closes #ES-10419
elasticsearchmachine pushed a commit that referenced this pull request Jan 10, 2025
…9749) (#119827)

The latest format version (7) of KeyStoreWrapper will be using a 256
bits key for the AES cipher.

Closes #ES-10419

Co-authored-by: Felix Barnsteiner <felixbarny@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-backport Automatically create backport pull requests when merged :Core/Infra/CLI CLI utilities, scripts, and infrastructure >enhancement Team:Core/Infra Meta label for core/infra team v8.18.0 v9.0.0

3 participants