[
https://issues.apache.org/jira/browse/NIFI-7122?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17164606#comment-17164606
]
ASF subversion and git services commented on NIFI-7122:
-------------------------------------------------------
Commit eeeda844747207102711cc2caad4c9a93982371a in nifi's branch
refs/heads/main from Andy LoPresto
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=eeeda84 ]
NIFI-7122 Introduced improvements to EncryptContent processor.
Added unit tests.
Refactored shared logic from various algorithm-specific secure hasher
implementations to AbstractSecureHasher.
Introduced secure hasher implementations for various KDFs.
Added custom validation to EncryptContent processor.
Implemented logic for EncryptContent to write operational metadata to flowfile
attributes.
Added encryption metadata attribute annotations to EncryptContent.
Added Argon2 KDF documentation and Bcrypt key derivation change notes to Admin
Guide.
Updated unit tests to calculate default/recommended cost parameters for Argon2.
This closes #4421.
Co-authored-by: mtien <mtien.apa...@gmail.com>
> Refactor existing KDF implementations to use SecureHasher interface
> -------------------------------------------------------------------
>
> Key: NIFI-7122
> URL: https://issues.apache.org/jira/browse/NIFI-7122
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework, Security
> Affects Versions: 1.11.1
> Reporter: Andy LoPresto
> Assignee: M Tien
> Priority: Major
> Labels: hashing, kdf, refactor, security
> Time Spent: 2h 20m
> Remaining Estimate: 0h
>
> The existing KDF implementations ({{bcrypt}}, {{scrypt}}, and {{PBKDF2}}) in
> the {{*CipherProvider}} classes should be refactored to provide
> algorithm-specific {{*SecureHasher}} implementations and then have the
> hashing logic delegated from the respective cipher provider objects to the
> hasher.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
