You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2021/03/18 20:03:00 UTC

[jira] [Resolved] (NIFI-5285) Re-evaluate memory/time cost parameters for 2018

     [ https://issues.apache.org/jira/browse/NIFI-5285?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann resolved NIFI-5285.
------------------------------------
    Resolution: Incomplete

Closing this issue pending future review of cost parameters.  Updates in NIFI-7668 include documentation on existing values which need to be considered when updating internal defaults.

> Re-evaluate memory/time cost parameters for 2018
> ------------------------------------------------
>
>                 Key: NIFI-5285
>                 URL: https://issues.apache.org/jira/browse/NIFI-5285
>             Project: Apache NiFi
>          Issue Type: Task
>          Components: Documentation &amp; Website
>    Affects Versions: 1.6.0
>            Reporter: Andy LoPresto
>            Assignee: Troy Melhase
>            Priority: Major
>              Labels: documentation, security
>
> There are some bcrypt, SCrypt, and PBKDF2 initial parameters which were determined to be secure against a default threat model given best known attacks in 2016. These should be re-evaluated for 2018. 
> Administration Guide
> * Line 1303
> * Line 1311
> * Line 1321
> * Line 1637
> If these values are updated, backward-compatibility for internal uses also needs to be evaluated. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)