Rotating encryption in Talend Studio

[RogerSi]

Hello,

What type of encription is used for system and routine encryption?

AES-CBC? Blowfish? Any other?

Many thanks!

Vlado

[RogerSi]

Hello,

Thank You for the fast answer!

Described routine is used for older versions of Talend Studio. rom the version 7.3 i can see other kind of encryption keys is used:

https://help.talend.com/r/en-US/7.3/installation-guide-esb-mac/rotating-encryption-keys-in-talend-studio

system.encryption.key.v1=ObIr3Je6QcJuxJEwErWaFWIxBzEjxIlBrtCPilSByJI\=

routine.encryption.key.v1=YBoRMn8gwD1Kt3CcowOiGeoxRbC2eNNVm7Id6vA3hrk\=

And this is not ROT13.

Any idea, guys?

Wishes,

Vlado

[gjeremy1617088143]

Hi, for 7.3 :

https://community.talend.com/s/feed/0D55b00006YtRMQCA3

[Anonymous]

Hi @Vladimir Gerassimov​ ,

Thanks for the question. This is something that has been raised to be added to our documentation. The answer to your questions is, for Studio version 7.3 and higher we use AES 256 bit as the encryption algorithm.

Regards

Richard

[RogerSi]

Hi @Richard Hall​ ,

Thanks for the answer.

What kind/flafour is used? CBC/CFB/OFB/etc?

What size of padding is used?

Wishes,

Vlado

[Anonymous]

Hi @Vladimir Gerassimov​,

Sorry for the delay in getting back to you. The kind/flavour is GCM. I do not have an answer for the size of padding at the moment. I have reached out to our team who will have implemented this. I will update you when I get a response.

Regards

Richard

[RogerSi]

Thank You @Richard Hall​ !

I'm looking forward for you answer.

Wishes,

Vlado

[gjeremy1617088143]

Hi did you read the post I linked ? ecryption is AES GMC with no padding (informations was extracted from Daikon crytpo github).

Hope it's helping you

[Anonymous]

Hi @Vladimir Gerassimov​ ,

Sorry for the backwards and forwards. I needed to make sure I spoke with one of our security experts on this. It appears that AES GCM does not use padding by design.

Regards

Richard

[RogerSi]

Hi @guenneguez jeremy​ ,

Thank You for your link!

Now I'm trying to rewrite this code in Python (only for testing)

Wishes,

Vlado