PersistentNameIDGenerationConfiguration: Type 4 UUID

[Hugo Slavia]

For Stored IDs  -- the options are base64 or base32 (
idp.persistentId.encoding).

What could be the options of generating Type 4 for the Stored ID?

Below is description from http://www.baeldung.com/java-uuid --- but of
course, we would have a predefined value as the source (not the random in
example below). More at
https://www.sohamkamani.com/blog/2016/10/05/uuid1-vs-uuid4/.

*"*

The UUID v4 implementation uses random numbers as the source. The Java
implementation is *SecureRandom* – which uses an unpredictable value as the
seed to generate random numbers to reduce the chance of collisions.

Let’s generate version 4 UUID:
1
UUID uuid = UUID.randomUUID();

Let’s generate a unique key using ‘SHA-256’ and a random UUID:
1
2
3
MessageDigest salt = MessageDigest.getInstance("SHA-256");
salt.update(UUID.randomUUID().toString().getBytes("UTF-8"));
String digest = bytesToHex(salt.digest());

*"*

On Tue, Jan 23, 2018 at 4:32 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 1/23/18, 7:06 PM, "users on behalf of Hugo Slavia" <
> users-bounces at shibboleth.net on behalf of hugoslavia101 at gmail.com> wrote:
>
> > Is it possible to generate Type 4 UUID for PersistentNameIDGenerationConfiguration?
> We are currently leveraging
> > "idp.persistentId.salt = foobar" in 'saml-nameid.properties.
>
> I don't understand the question. There are two strategy plugins provided
> for supplying pairwise IDs, a salted hash and a random value stored in a
> database. I don't recall exactly which UUID type is used for the random
> stored variant, it's just the usual "generate a random value" one.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180123/900c98ae/attachment-0001.html>