[ 
https://issues.apache.org/jira/browse/NIFI-6536?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16921617#comment-16921617
 ] 

ASF subversion and git services commented on NIFI-6536:
-------------------------------------------------------

Commit 4c6c1cbb14aaedda649981f76d71ced2e8a36eac in nifi's branch 
refs/heads/master from Alessandro D'Armiento
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=4c6c1cb ]

NIFI-6536 EncryptContent accepts configurable PGP symmetric cipher
Additional test case in TestEncryptContent
Apply suggestions from code review
nit picking
Apply suggestions from code review
nitpicking from mgaido91
Small fixes
Additional test case to check the provided cipher is actually used by inferring 
it from the ciphertext
Updated `EncryptContent` to use a pre-defined list of allowable PGP ciphers
Updated `EncryptContent` to check the validity of 
`PGP_SYMMETRIC_ENCRYPTION_CIPHER`
Updated test cases
Minor fixes
NIFI-6536 Fixed typo and strengthened validity checking for PGP symmetric 
cipher.

This closes #3664.

Co-Authored-By: Marco Gaido <marcogaid...@gmail.com>

Signed-off-by: Andy LoPresto <alopre...@apache.org>


> Expose PGP symmetric encryption algorithm in EncryptContent
> -----------------------------------------------------------
>
>                 Key: NIFI-6536
>                 URL: https://issues.apache.org/jira/browse/NIFI-6536
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Extensions
>    Affects Versions: 1.9.2
>            Reporter: Brandon DeVries
>            Priority: Minor
>              Labels: algorithm, pgp, security, symmetric_cipher
>          Time Spent: 5h 50m
>  Remaining Estimate: 0h
>
> EncryptContent, when using PGP, is currently hard coded to use AES_128 as its 
> symmetric key algorithm.  There is a TODO adjacent to this in the code [1]:
>      // TODO: Refactor internal symmetric encryption algorithm to be 
> customizable 
> [1] 
> [https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/security/util/crypto/OpenPGPKeyBasedEncryptor.java#L348]



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

Reply via email to