use by default ECDH algo for encrypting keys

adorsys · Nov 28, 2023 · e2199b3 · e2199b3
1 parent cae3f85
commit e2199b3
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 6 deletions.
diff --git a/.../src/main/java/de/adorsys/datasafe/encrypiton/api/types/encryption/KeyCreationConfig.java b/.../src/main/java/de/adorsys/datasafe/encrypiton/api/types/encryption/KeyCreationConfig.java
@@ -45,26 +45,26 @@ public static class SecretKeyCreationCfg {
     public static class EncryptingKeyCreationCfg {
 
         @Builder.Default
-        private final String algo = "RSA";
+        private final String algo = "ECDH";
 
         @Builder.Default
-        private final int size = 2048;
+        private final int size = 256;
 
         @Builder.Default
-        private final String sigAlgo = "SHA256withRSA";
+        private final String sigAlgo = "SHA256withECDSA";
     }
 
     @Getter
     @Builder
     public static class SigningKeyCreationCfg {
 
         @Builder.Default
-        private final String algo = "RSA";
+        private final String algo = "ECDH";
 
         @Builder.Default
-        private final int size = 2048;
+        private final int size = 256;
 
         @Builder.Default
-        private final String sigAlgo = "SHA256withRSA";
+        private final String sigAlgo = "SHA256withECDSA";
     }
 }
diff --git a/datasafe-rest-impl/src/main/resources/application.properties b/datasafe-rest-impl/src/main/resources/application.properties
@@ -36,3 +36,11 @@ datasafe.encryption.keystore.pbkdf.scrypt.parallelization=1
 datasafe.encryption.keystore.pbkdf.scrypt.saltLength=16
 datasafe.encryption.keystore.macAlgo=HmacSHA3_512
 datasafe.encryption.cms.algo=AES256_GCM
+
+#datasafe.encryption.keys.encrypting.algo=RSA
+#datasafe.encryption.keys.encrypting.size=4096
+#datasafe.encryption.keys.encrypting.sigAlgo=SHA256withRSA
+
+#datasafe.encryption.keys.signing.algo=RSA
+#datasafe.encryption.keys.signing.size=4096
+#datasafe.encryption.keys.signing.sigAlgo=SHA256withRSA