[NIFI-9965] Refactor encryption and decryption of sensitive flow properties - ASF JIRA

Attach files

Attach Screenshot

Add vote

Voters

Watch issue

Watchers

Create sub-task

Link

Clone

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Open
Priority: Minor
Resolution: Unresolved
Affects Version/s: None
Fix Version/s: None
Component/s: Security
Labels:
None

Description

Sensitive flow properties are typically encrypted in flow.xml.gz as `enc{ciphertext}`. Decryption is also not standardized, but used in various components, `StandardFlowComparator` and `FlowFromDOMFactory` to name a few. This issue is an effort to standardize the way these values are encrypted and decrypted. This issue also aims to introduce an encryption format that more clearly identifies the underlying sensitive properties algorithm used.