[
https://issues.apache.org/jira/browse/NIFI-15876?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18076301#comment-18076301
]
ASF subversion and git services commented on NIFI-15876:
--------------------------------------------------------
Commit c0cca2babfdffe776c4320c771e72d1224e17663 in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=c0cca2babfd ]
NIFI-15876 Switched to Java Security Interfaces for PBKDF2 (#11178)
replaced Bouncy Castle generator and digest with equivalent
PBKDF2WithHmacSHA512 Secret Key Factory
Signed-off-by: Lucas Ottersbach <[email protected]>
> Switch to Java Security Interfaces for PBKDF2
> ---------------------------------------------
>
> Key: NIFI-15876
> URL: https://issues.apache.org/jira/browse/NIFI-15876
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework, Security
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> The default algorithm for deriving an encryption key for sensitive properties
> uses the Bouncy Castle SHA-512 and PBKDF2 implementation classes in
> {{{}nifi-security-crypto-key{}}}. Modern Java Virtual Machines support both
> of these algorithms, eliminating the need for use of Bouncy Castle in this
> key derivation implementation.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
