From 9d0d93472ff601a0150371b8b62aeb8747348a55 Mon Sep 17 00:00:00 2001 From: Rakshith R Date: Thu, 29 Sep 2022 11:25:31 +0530 Subject: [PATCH] osd: use 256 as cryptographicLength for keys using kmip kms This commit changes cryptographic length for keys created for kmip kms to 256 from 128, since it is more secure. Signed-off-by: Rakshith R --- pkg/daemon/ceph/osd/kms/kmip.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/daemon/ceph/osd/kms/kmip.go b/pkg/daemon/ceph/osd/kms/kmip.go index bd2bddfee..791fd13e6 100644 --- a/pkg/daemon/ceph/osd/kms/kmip.go +++ b/pkg/daemon/ceph/osd/kms/kmip.go @@ -48,7 +48,7 @@ const ( kmipDefaultWriteTimeout = uint8(10) // cryptographicLength of the key. - cryptographicLength = 128 + cryptographicLength = 256 //nolint:gosec, value not credential, just configuration keys. kmipEndpoint = "KMIP_ENDPOINT"