[NIFI-7119] Implement boundary checking for Argon2 cost parameters

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.11.1
• Fix Version/s: 1.12.0, 1.11.4
• Component/s: Core Framework
• Labels: beginner boundary hashing security validation
• Assignee: Margot Tien
• Reporter: Andy LoPresto
• Created: 10/Feb/20 23:05
• Updated: 16/Mar/20 16:14
• Resolved: 12/Mar/20 00:31

Description

The Argon2 secure hasher added for the flow fingerprint fix does not enforce boundaries around the cost parameters provided to the various constructors. It should restrict provided values to valid entries as noted in the Javadoc.

Issue Links

• Is contained by: NIFI-7120 Improve secure hasher architecture
• links to: GitHub Pull Request #4111