Not yet released. Next week

Security enhancements

This version of c9 includes a range of security changes as part of our regular security audit efforts

• General Cryptography improvements
  • Passwords / Clerk keys migrated to PBKDF / HMAC-SHA256 hashes
  • At rest encryption of all other critical data migrated to AES/GCM using a new key management regime that will allow use to easily rotate and expire old/compromised keys
• Remote Access improvements
  • Add ability to set a per user remote access password, configured in login users. A new remote client needs to be installed in order to make use of this. This will allow disabling /retiring of the existing global remote access password for stricter access control
  • Part of above change mobile capture on remote access will use 2FA mobile configured on login user to enforce strict MFA authenticiation
• Stricter C9 support tooling.  For our own remote access into dealer systems as part of our support work, this version forces our existing access to use strict MFA linked to staff mobile phones. Previous support access was /only single factor verification.
• Other security related changes
  • clerkkey input now requires an explicit Enter key press to test the clerk key. So clerk input now requires two enter key presses to continue on. This is necessary to both improve security of clerk access to minimise risk accidental/intentional discovery of low entrophy clerk keys, but also because PBKDF algorithm is intentionally slow, it is no longer possible to check for a match on every key stroke
  • TFN presentation on payroll tab is by default hidden. There is a unhide button you can click to review TFN
  • PayDay super log / STP log clearing: interaction with STP and PayDay super now clears potentially sensitive request payloads once the operation is finalized (failed or completed)