[SONAR] Fixed weak hash algorithm

pcorino · Jul 30, 2024 · c693910 · c693910
1 parent e7dea2e
commit c693910
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/knowageutils/src/main/java/it/eng/spagobi/commons/utilities/AuditLogUtilities.java b/knowageutils/src/main/java/it/eng/spagobi/commons/utilities/AuditLogUtilities.java
@@ -223,7 +223,7 @@ private static String createRolesString(Collection roles) {
 	}
 
 	public static String calculateHash(StringBuilder str) throws Exception {
-		MessageDigest algorithm = MessageDigest.getInstance("MD5");
+		MessageDigest algorithm = MessageDigest.getInstance("SHA-512");
 		String is = new String(str);
 		DigestInputStream dis = new DigestInputStream(new ByteArrayInputStream(is.getBytes()), algorithm);
 		while (dis.read() != -1)

diff --git a/knowageutils/src/main/java/it/eng/spagobi/security/PasswordEncrypter.java b/knowageutils/src/main/java/it/eng/spagobi/security/PasswordEncrypter.java
@@ -31,7 +31,7 @@
 
 public class PasswordEncrypter {
 	private Mac mac = null;
-	private static final String PROVIDER = "HmacSHA1";
+	private static final String PROVIDER = "SHA-512";
 
 	public PasswordEncrypter(byte[] keyBytes) {
 		// All com.sun.crypto.** classes are JDK internal APIs that are not supported and should not be used.