Interesting issue with crytpographic nameID and memcached on an SP
Cantor, Scott E.
cantor.2 at osu.edu
Sat Aug 6 19:46:50 BST 2011
On 8/5/11 5:53 PM, "Roy, Nicholas S" <nicholas-roy at uiowa.edu> wrote:
>The crypto nameID is significantly longer than the previous nameID
>format. This is where the problem arises. If an SP uses memcached, the
>xmltooling memcached extension seems to put the nameID value in a key,
>which is limited to 250 characters
> in length.
Using AES128 generally keeps them to 255 or so, but it's true that the
storage contract does assume the key size is 255 or less, and using larger
AES probably would break it.
Can you file a bug on that? I can take a look at using some kind of hash
to shrink the storage key requirements down.
-- Scott
More information about the users
mailing list