[NIFI-1467] Provide Bcrypt salt generation code

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 0.5.0
• Component/s: Core Framework
• Labels: encryption security
• Assignee: Andy LoPresto
• Reporter: Andy LoPresto
• Created: 04/Feb/16 01:10
• Updated: 08/Apr/21 13:07
• Resolved: 08/Apr/21 13:06

Description

Currently, the ScryptCipherProvider can accept both formatted salt in the mcrypt format $s0$e0101$ABCDEFGHIJKLMNOPQRSTUV or raw salt 0x01 23 45 67 89 AB CD EF FE DC BA 98 76 54 32 10 format and combine that with the instance parameters N, r, and p to return a complete salt. At the same time, due to inconsistency in the Base64 formatting, BcryptCipherProvider can only accept fully formatted salts, and cannot generate a complete salt from raw input.

Use the custom Base64 encoding as provided in BCrypt.java to resolve this issue.

Issue Links

• is fixed by: NIFI-7268 Change library implementation of Bcrypt
• is fixed by: NIFI-7122 Refactor existing KDF implementations to use SecureHasher interface