[NIFI-7127] Allow injection of SecureHasher into FingerprintFactory

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.11.1
• Fix Version/s: 1.14.0
• Component/s: Core Framework, Security
• Labels: FIPS dependency-injection security
• Epic Link: Improve secure hasher architecture
• Assignee: Nathan Gough
• Reporter: Andy LoPresto
• Created: 10/Feb/20 23:35
• Updated: 09/Mar/21 21:21
• Resolved: 03/Mar/21 03:40

Description

The FingerprintFactory should allow injection of a specific SecureHasher implementation to avoid an explicit dependency on Argon2. As long as every node in the cluster uses the same implementation, the output will be deterministic and comparable.

Dependency injection allows for better unit testing, upgradability, and configurability based on performance concerns.

Issue Links

• causes: NIFI-8302 Correct Sensitive Value Encoding in FingerprintFactory
• links to: GitHub Pull Request #4836
• links to: GitHub Pull Request #4867