[ 
https://issues.apache.org/jira/browse/NIFI-1277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15122825#comment-15122825
 ] 

Andy LoPresto commented on NIFI-1277:
-------------------------------------

I've looked at places where encryption is used as a function of the application 
(i.e. {{EncryptContent}} processor), but have not yet examined the sensitive 
property storage and configuration values. I'm investigating a number of 
libraries as potential solutions, such as Vault [1] and keywhiz [2]. 

[1] https://github.com/hashicorp/vault
[2] https://github.com/square/keywhiz


> Audit current use of cryptography throughout application
> --------------------------------------------------------
>
>                 Key: NIFI-1277
>                 URL: https://issues.apache.org/jira/browse/NIFI-1277
>             Project: Apache NiFi
>          Issue Type: Task
>          Components: Core Framework, Extensions
>    Affects Versions: 0.4.0
>            Reporter: Andy LoPresto
>            Assignee: Andy LoPresto
>            Priority: Critical
>              Labels: security
>             Fix For: 0.6.0
>
>
> Joe requested I audit the use of cryptography throughout the application, 
> specifically in processors, sensitive properties, configuration values, etc. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to