[NIFI-7670] Implement flow migration for PBE AEAD algorithms in Encrypt-Config toolkit

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.12.0
• Fix Version/s: 1.14.0
• Component/s: Tools and Build
• Labels: aead encryption kdf pbe security toolkit
• Assignee: David Handermann
• Reporter: Andy LoPresto
• Created: 24/Jul/20 02:28
• Updated: 04/May/21 13:46
• Resolved: 04/May/21 13:46

Description

The toolkit does not support the new PBE AEAD algorithm because it is not a standard JCE algorithm (it is a custom combination of a KDF and cipher algorithm). The toolkit should be enhanced to support the full range of new algorithms introduced by NIFI-7668 (or at a minimum the custom algorithm introduced in NIFI-7638).

Issue Links

• is fixed by: NIFI-8230 Remove default Sensitive Properties Key
• is related to: NIFI-8230 Remove default Sensitive Properties Key
• is related to: NIFI-7638 Add PBE AEAD sensitive flow property protection scheme
• is related to: NIFI-7668 Add configurable PBE AEAD algorithms to flow encryption