(nifi) branch main updated: NIFI-16414 Deprecate BLAKE2b Hash Algorithm for Removal (#11752)

[pvillard]

This is an automated email from the ASF dual-hosted git repository.

pvillard31 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git


The following commit(s) were added to refs/heads/main by this push:
     new 89f479514b4 NIFI-16414 Deprecate BLAKE2b Hash Algorithm for Removal 
(#11752)
89f479514b4 is described below

commit 89f479514b406e8ffb87058d33a05eba9f89a866
Author: David Handermann <exceptionfact...@apache.org>
AuthorDate: Fri Oct 2 12:57:14 2026 -0500

    NIFI-16414 Deprecate BLAKE2b Hash Algorithm for Removal (#11752)
---
 .../processors/standard/CryptographicHashContent.java     | 15 +++++++++++++++
 .../nifi/processors/standard/hash/HashAlgorithm.java      |  8 ++++----
 2 files changed, 19 insertions(+), 4 deletions(-)

diff --git 
a/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/CryptographicHashContent.java
 
b/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/CryptographicHashContent.java
index 47a2b66f125..9192146a4b3 100644
--- 
a/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/CryptographicHashContent.java
+++ 
b/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/CryptographicHashContent.java
@@ -23,7 +23,10 @@ import org.apache.nifi.annotation.behavior.SupportsBatching;
 import org.apache.nifi.annotation.behavior.WritesAttribute;
 import org.apache.nifi.annotation.documentation.CapabilityDescription;
 import org.apache.nifi.annotation.documentation.Tags;
+import org.apache.nifi.annotation.lifecycle.OnScheduled;
 import org.apache.nifi.components.PropertyDescriptor;
+import org.apache.nifi.deprecation.log.DeprecationLogger;
+import org.apache.nifi.deprecation.log.DeprecationLoggerFactory;
 import org.apache.nifi.flowfile.FlowFile;
 import org.apache.nifi.logging.ComponentLog;
 import org.apache.nifi.migration.PropertyConfiguration;
@@ -89,6 +92,8 @@ public class CryptographicHashContent extends 
AbstractProcessor {
             REL_SUCCESS
     );
 
+    private static final DeprecationLogger deprecationLogger = 
DeprecationLoggerFactory.getLogger(CryptographicHashContent.class);
+
     @Override
     public Set<Relationship> getRelationships() {
         return RELATIONSHIPS;
@@ -99,6 +104,16 @@ public class CryptographicHashContent extends 
AbstractProcessor {
         return PROPERTY_DESCRIPTORS;
     }
 
+    @OnScheduled
+    public void onScheduled(final ProcessContext context) {
+        final HashAlgorithm algorithm = 
HashAlgorithm.fromName(context.getProperty(HASH_ALGORITHM).getValue());
+        if (algorithm.isBlake2()) {
+            final String algorithmName = algorithm.getName();
+            deprecationLogger.warn("{} is deprecated for removal", 
algorithmName);
+            getLogger().warn("{} is deprecated for removal", algorithmName);
+        }
+    }
+
     @Override
     public void onTrigger(final ProcessContext context, final ProcessSession 
session) {
         FlowFile flowFile = session.get();
diff --git 
a/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/hash/HashAlgorithm.java
 
b/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/hash/HashAlgorithm.java
index ec643ffd128..75b59ed31bc 100644
--- 
a/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/hash/HashAlgorithm.java
+++ 
b/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/hash/HashAlgorithm.java
@@ -37,10 +37,10 @@ public enum HashAlgorithm {
     SHA3_256("SHA3-256", 32, "Keccak-based SHA3 family"),
     SHA3_384("SHA3-384", 48, "Keccak-based SHA3 family"),
     SHA3_512("SHA3-512", 64, "Keccak-based SHA3 family"),
-    BLAKE2_160("BLAKE2-160", 20, "Also known as Blake2b"),
-    BLAKE2_256("BLAKE2-256", 32, "Also known as Blake2b"),
-    BLAKE2_384("BLAKE2-384", 48, "Also known as Blake2b"),
-    BLAKE2_512("BLAKE2-512", 64, "Also known as Blake2b");
+    BLAKE2_160("BLAKE2-160", 20, "Deprecated for removal. Also known as 
Blake2b"),
+    BLAKE2_256("BLAKE2-256", 32, "Deprecated for removal. Also known as 
Blake2b"),
+    BLAKE2_384("BLAKE2-384", 48, "Deprecated for removal. Also known as 
Blake2b"),
+    BLAKE2_512("BLAKE2-512", 64, "Deprecated for removal. Also known as 
Blake2b");
 
     private final String name;
     private final int digestBytesLength;