[jira] [Resolved] (NIFI-7397) Detect encryption metadata attributes on incoming flowfile and use for decryption

["David Handermann (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/NIFI-7397?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann resolved NIFI-7397.
------------------------------------
      Assignee: David Handermann
    Resolution: Fixed

The DecryptContent Processor released in NiFi 1.20.0 supports reading key derivation metadata from the initial bytes of FlowFile content. This approach supersedes reading FlowFile attributes and provides similar capabilities.

> Detect encryption metadata attributes on incoming flowfile and use for decryption
> ---------------------------------------------------------------------------------
>
>                 Key: NIFI-7397
>                 URL: https://issues.apache.org/jira/browse/NIFI-7397
>             Project: Apache NiFi
>          Issue Type: New Feature
>          Components: Extensions, Security
>    Affects Versions: 1.11.4
>            Reporter: Andy LoPresto
>            Assignee: David Handermann
>            Priority: Major
>              Labels: attribute, encryption, kdf, security
>
> After NIFI-3889 / NIFI-7122 / NIFI-7396 are complete, incoming flowfiles containing content encrypted by the {{EncryptContent}} processor will have encryption metadata in the attributes, which should allow arbitrary decryption from a variety of algorithms and KDFs rather than having a specific instance of the {{EncryptContent}} processor in decrypt mode for every possible encryption type. However, this will likely depend on the introduction of key management service (KMS) controller services for the processor to encapsulate key derivation & provision and allow for unique identifiers to reference those services & keys. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)