Repository Encryption Protocol Version 1

The first version of support for repository encryption includes the following cipher algorithms:

Repository Type Cipher Algorithm

Content Repository

AES/CTR/NoPadding

FlowFile Repository

AES/GCM/NoPadding

FlowFile Swap Manager

AES/GCM/NoPadding

Provenance Repository

AES/GCM/NoPadding

The following classes provide the direct repository encryption implementation, extending standard classes:

Repository Type Class

Content Repository

org.apache.nifi.content.EncryptedFileSystemRepository

FlowFile Repository

org.apache.nifi.wali.EncryptedSequentialAccessWriteAheadLog

FlowFile Swap Manager

org.apache.nifi.controller.EncryptedFileSystemSwapManager

Provenance Repository

org.apache.nifi.provenance.EncryptedWriteAheadProvenanceRepository