Cryptography Properties

The Cúram CryptoConfig.properties file contains settings for cipher and digest cryptography. Therefore, this file and all the files it refers to (i.e., keystore and salt) should be considered critical items to the security of your system and should be provided with adequate access controls (e.g., file permissions) and specifically modified and segregated when used for production systems. That is, if the details of these files were to become widely known, while not necessarily a security risk themselves, would remove a level of protection that might necessitate a disruptive crypto change (see Cipher Customization and Digest Customization).

Related topics: