nifi-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (Jira)" <j...@apache.org>
Subject [jira] [Commented] (NIFI-6536) Expose PGP symmetric encryption algorithm in EncryptContent
Date Tue, 03 Sep 2019 18:01:00 GMT

    [ https://issues.apache.org/jira/browse/NIFI-6536?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16921617#comment-16921617
] 

ASF subversion and git services commented on NIFI-6536:
-------------------------------------------------------

Commit 4c6c1cbb14aaedda649981f76d71ced2e8a36eac in nifi's branch refs/heads/master from Alessandro
D'Armiento
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=4c6c1cb ]

NIFI-6536 EncryptContent accepts configurable PGP symmetric cipher
Additional test case in TestEncryptContent
Apply suggestions from code review
nit picking
Apply suggestions from code review
nitpicking from mgaido91
Small fixes
Additional test case to check the provided cipher is actually used by inferring it from the
ciphertext
Updated `EncryptContent` to use a pre-defined list of allowable PGP ciphers
Updated `EncryptContent` to check the validity of `PGP_SYMMETRIC_ENCRYPTION_CIPHER`
Updated test cases
Minor fixes
NIFI-6536 Fixed typo and strengthened validity checking for PGP symmetric cipher.

This closes #3664.

Co-Authored-By: Marco Gaido <marcogaido91@gmail.com>

Signed-off-by: Andy LoPresto <alopresto@apache.org>


> Expose PGP symmetric encryption algorithm in EncryptContent
> -----------------------------------------------------------
>
>                 Key: NIFI-6536
>                 URL: https://issues.apache.org/jira/browse/NIFI-6536
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Extensions
>    Affects Versions: 1.9.2
>            Reporter: Brandon DeVries
>            Priority: Minor
>              Labels: algorithm, pgp, security, symmetric_cipher
>          Time Spent: 5h 50m
>  Remaining Estimate: 0h
>
> EncryptContent, when using PGP, is currently hard coded to use AES_128 as its symmetric
key algorithm.  There is a TODO adjacent to this in the code [1]:
>      // TODO: Refactor internal symmetric encryption algorithm to be customizable 
> [1] [https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/security/util/crypto/OpenPGPKeyBasedEncryptor.java#L348]



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

Mime
View raw message