Password algorithm for internal_user password

Products

• CA API Gateway

Issue/Introduction

Customer wanted to directly update the user password from internal_user table and also wanted to know the password algorithm used.

Environment

All supported versions of API Gateway.

Resolution

We use sha512 hashing when encrypting password and saving to ssg.internal_user table.

Also its not direct sha512 of the password that is stored in the database, there is lot of custom characters appended to it.

NOTE: Broadcom DO NOT refrain from customers updating the ssg database directly.