Details
-
New Feature
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
Description
After NIFI-3889 / NIFI-7122 / NIFI-7396 are complete, incoming flowfiles containing content encrypted by the EncryptContent processor will have encryption metadata in the attributes, which should allow arbitrary decryption from a variety of algorithms and KDFs rather than having a specific instance of the EncryptContent processor in decrypt mode for every possible encryption type. However, this will likely depend on the introduction of key management service (KMS) controller services for the processor to encapsulate key derivation & provision and allow for unique identifiers to reference those services & keys.
Attachments
Issue Links
- depends upon
-
NIFI-7324 Introduce controller service for KDFs
- Resolved
-
NIFI-3889 EncryptContent processor should add encryption metadata as attributes
- Resolved
-
NIFI-7122 Refactor existing KDF implementations to use SecureHasher interface
- Resolved
-
NIFI-7396 Add encryption metadata attributes for PGP encryption
- Resolved
- is superceded by
-
NIFI-11022 Add Decrypt Processors Compatible with EncryptContent Encoding
- Resolved