Re: Asymmetric Key Size not sufficient

2021-02-14 Thread Mahir Kabir
a < > ichattopadhy...@gmail.com> wrote: > >> Recent versions of Solr use 2048. >> >> https://github.com/apache/lucene-solr/blob/branch_8_6/solr/core/src/java/org/apache/solr/util/CryptoKeys.java#L332 >> >> Thanks for your report. >> >> On Fri, Feb

Asymmetric Key Size not sufficient

2021-02-12 Thread Mahir Kabir
Hello, I am a Ph.D. student at Virginia Tech, USA. While working on a security project-related work, we came across the following vulnerability in the source code - In file https://github.com/apache/lucene-solr/blob/branch_6_6/solr/core/src/java/org/apache/solr/util/CryptoKeys.java