[NIFI-7128] Extend StringEncryptor with SecureHasher capability

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.11.1
• Fix Version/s: 1.14.0
• Component/s: Core Framework, Security
• Labels: encryption hashing security
• Epic Link: Improve secure hasher architecture
• Assignee: David Handermann
• Reporter: Andy LoPresto
• Created: 10/Feb/20 23:38
• Updated: 25/Feb/21 22:33
• Resolved: 25/Feb/21 22:33

Description

The StringEncryptor should be refactored to an interface and a standard implementation provided as StandardStringEncryptor. It could also offer a default implementation of the SecureHasher interface (via delegation to Argon2, which would allow for standard hashing capability present anywhere the existing StringEncryptor is used.

Issue Links

• is fixed by: NIFI-7668 Add configurable PBE AEAD algorithms to flow encryption