You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "Andy LoPresto (Jira)" <ji...@apache.org> on 2020/07/24 02:23:00 UTC

[jira] [Created] (NIFI-7669) Add flow protection key caching mechanism for derived keys

Andy LoPresto created NIFI-7669:
-----------------------------------

             Summary: Add flow protection key caching mechanism for derived keys
                 Key: NIFI-7669
                 URL: https://issues.apache.org/jira/browse/NIFI-7669
             Project: Apache NiFi
          Issue Type: Improvement
          Components: Configuration, Core Framework
    Affects Versions: 1.12.0
            Reporter: Andy LoPresto
            Assignee: Andy LoPresto


The specific algorithm introduced in NIFI-7638 introduces a ~1 sec delay in every encryption operation (which occurs during every flow synchronization and serialization to disk) due to the Argon2 KDF process. This is an acceptable tradeoff for security-conscious users at this time, but can be improved through a key caching mechanism in memory. Deriving the key once at application startup and using it directly will remove this delay, and the key cannot change without an application restart. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)