Skip to content

Update documentation for the 'ESAPI 2.x Symmetric Encryption User Guide' #908

@kwwall

Description

@kwwall

Describe the bug

The file documentation/esapi4java-core-2.0-symmetric-crypto-user-guide.html has references to the the non-longer valid ESAPI property Encryptor.fixedIV . One used to be able to pick:

Encryptor.chooseIVMethod=fixedIV

and then set Encryptor.fixedIV, but that was a bad kludge from the start to allow those who had previously hard-coded an IV (way more common than you'd think as per my code review observations). That property was deprecated in 2.2.0.0 and removed in 2.3.0.0.

Therefore, this User Guide needs to be revised to reflect that.

Specify what ESAPI version(s) you are experiencing this bug in

Versions 2.3.0.0 and later.

To Reproduce

Look at the file documentation/esapi4java-core-2.0-symmetric-crypto-user-guide.html and search for the above mentioned properties and update the documentation accordingly.

Expected behavior

Fix the docs.

Platform environment (please complete the following information)

  • OS: all
  • Browser [e.g. chrome, safari]: N/A
  • JDK version used with ESAPI: N/A

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions