DSpace/DSpace — pull request #41 by mwoodiupui (2012-07-11 18:56:19+00:00)
Title: [DS-861] Salt PasswordAuthentication

This replaces the plain MD5 password hashes with salted SHA-512 multi-round hashing. It requires some database schema changes which are included in what I've committed. It touches AIP format, and I mean for the changes to be backward-compatible with existing AIPs.

The hash algorithm is actually configurable, but I recommend not configuring it -- the default is arguably the strongest choice in 2012 from those which should be provided by recent JVM kits.

THIS CODE IS NOT YET TESTED. I'm filing this request now to facilitate examination and comment.