[NIFI-6708] Improve DSA/El Gamal PGP compatibility issues

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.9.2
• Fix Version/s: 1.14.0
• Component/s: Core Framework, Extensions
• Labels: dsa el-gamal encryption gpg pgp security
• Assignee: David Handermann
• Reporter: Andy LoPresto
• Created: 25/Sep/19 03:47
• Updated: 22/Apr/21 20:34
• Resolved: 22/Apr/21 20:34

Description

Some users have complained about an inability to use DSA GPG keys in the EncryptContent processor. While DSA keys are only used for signatures, they are frequently paired with El Gamal encryption keys in GnuPG. I am exploring the OpenPGP implementation via Bouncy Castle to see if there are improvements we can make. 

Issue Links

• is fixed by: NIFI-8251 Add Encrypt and Decrypt PGP Processors and Services
• relates to: NIFI-5346 Allow EncryptContent processor to specify PGP key as processor property
• relates to: NIFI-7836 Add Encrypt and Decrypt CMS Processors and Services