- CBC
- CTR
- GCM
- NoPadding
- PKCS5Padding
- RAW
- PASSWORD
Sensitive Property: true
Decrypt content encrypted with AES and encoded according conventions added in NiFi 0.5.0 for the EncryptContent Processor. The Processor reads the first 256 bytes to determine the presence of a cryptographic salt based on finding the 'NiFiSALT' delimiter. The salt is not present for content encrypted with a raw hexadecimal key. The Processor determines the presence of the initialization vector based on finding the 'NiFiIV' delimiter.The salt format indicates the Key Derivation Function that the Processor uses to generate a secret key based on a configured password. The Processor derives keys with a size of 128 bits according to the conventions implemented in NiFi 0.5.0.
cryptography, decipher, decrypt, AES, Argon2, bcrypt, scrypt, PBKDF2
In the list below, the names of required properties appear in bold. Any other properties (not in bold) are considered optional. The table also indicates any default values.
| Display Name | API Name | Default Value | Allowable Values | Description |
|---|---|---|---|---|
| Cipher Algorithm Mode | cipher-algorithm-mode | GCM |
| Block cipher mode of operation for decryption using the Advanced Encryption Standard |
| Cipher Algorithm Padding | cipher-algorithm-padding | NoPadding |
| Padding specification used in cipher operation for decryption using the Advanced Encryption Standard |
| Key Specification Format | key-specification-format | PASSWORD |
| Format describing the configured Key Specification |
| Key Specification | key-specification | Specification providing the raw secret key or a password from which to derive a secret key Sensitive Property: true |
| Name | Description |
|---|---|
| success | Decryption succeeded |
| failure | Decryption failed |