Andy LoPresto created NIFI-7669:
-----------------------------------
Summary: Add flow protection key caching mechanism for derived keys
Key: NIFI-7669
URL: https://issues.apache.org/jira/browse/NIFI-7669
Project: Apache NiFi
Issue Type: Improvement
Components: Configuration, Core Framework
Affects Versions: 1.12.0
Reporter: Andy LoPresto
Assignee: Andy LoPresto
The specific algorithm introduced in NIFI-7638 introduces a ~1 sec delay in
every encryption operation (which occurs during every flow synchronization and
serialization to disk) due to the Argon2 KDF process. This is an acceptable
tradeoff for security-conscious users at this time, but can be improved through
a key caching mechanism in memory. Deriving the key once at application startup
and using it directly will remove this delay, and the key cannot change without
an application restart.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
