Documentation, Support AES-256 password encoding

[Zech-Hein]

Feature epic details

• For the title of this issue, type: Documentation, Development epic name
• Link to development epic: Support AES-256 password encryption In Liberty open-liberty#29659
• Target GA release: 25.0.0.2

Operating systems

Does the documentation apply to all operating systems?

• Yes
• No; specify operating systems: ______

Summary

Provide a concise summary of your feature. What is the update, why does it matter, and to whom? What do 80% of target users need to know to be most easily productive using your runtime update?

1. Password Encryption will now use (automatically) AES-256 instead of AES-128.
2. Password Decryption will support both AES-128 and AES-256 encrypted passwords. (zero-migration)

Configuration

List any new or changed properties, parameters, elements, attributes, etc. Include default values and configuration examples where relevant:

Updates to existing topics

To update existing topics, specify a link to the topics that are affected. Include a copy of the current text and the exact text to which it will change. For example: Change ABC to XYZ

List of existing Docs found so far:

-https://openliberty.io/docs/latest/password-encryption.html
-securityUtility: https://openliberty.io/docs/latest/reference/command/securityUtility-encode.html

Create a new topic

To create a topic, specify a first draft of the topic that you want added and the section in the navigation where the topic should go.

[dmuelle]

Hi @Zech-Hein - the following pages are updated:

Password encryption limitations

I edited this slightly to make it more clear that, although Liberty supports AES-256, AES is not the default encoding for securityUtility encode. Let me know if anything here needs an edit.

encode

updated the description for the encoding option.

Thanks!

[dmuelle]

Zech provided feedback and approved the updates via slack

[dmuelle]

pushed to 25.0.0.1. Reverted the changes untl the feature is GA