Wildfly Datasource password encryption using AES 256 algorithm

[Amit Pareek]

Hi Team,

In our project we want to encrypt data source password encryption using AES 256 or stronger algorithm.

Wildfly provide password security using elyrton credential store concept and encrypted password can be reference in datasource subsytem using alias.

Can someone help me how AES 256 algorithm can be used to encrypt the password ?

Thanks ,

Amit .

[Farah Juma]

Elytron's encrypted expression support could be used as described here:

https://wildfly-security.github.io/wildfly-elytron/blog/wildfly-encrypted-expressions/

[Amit Pareek]

Thanks Farah for the link .

Does AES 256 algorithm can be used to encrypt the password ?

[Farah Juma]

Yes, AES 256 will be used by default.

[Amit Pareek]

Thanks Farah , but is there a reference in any document that AWS 256 is being used ? Which we can use as a reference and proof ?

[Darran Lofthouse]

This is open source we can do one step better ;-) This is the module which contains the implementation:

https://github.com/wildfly-security/wildfly-elytron/tree/2.x/encryption

[Amit Pareek]

Thanks Darran .