[NIFI-4132] Create EncryptRecord controller service and processor

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.3.0
• Component/s: Extensions
• Labels: encryption records security
• Assignee: Unassigned
• Reporter: Andy LoPresto
• Created: 27/Jun/17 16:41
• Updated: 10/Mar/23 16:47

Description

From a user:

As a dataflow manager, I would love to use a processor to encrypt fields in my record objects. Essentially, i can plugin a record reader controller service to "EncryptRecordField", deserialize incoming bytes to internal record objects, encrypt select fields, then plugin a record writer controller service to serialize the record objects into a user specified output format.
It would be nice to support pluggable key management. Could either be something similar to EncryptContent processor config, or to introduce a KeyManagementControllerService which can interface with various processors when necessary.