- generateCertificate(String, KeyPair) - Method in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
- generateIssuedCertificate(String, PublicKey, X509Certificate, KeyPair, String, int) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
- generateIssuedCertificate(String, PublicKey, Extensions, X509Certificate, KeyPair, String, int) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
- generateIV() - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- generateIV() - Method in class org.apache.nifi.security.util.crypto.KeyedCipherProvider
-
Generates a new random IV of the correct length.
- generateKeyPair() - Method in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
- generatePassword() - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Generates a random Hex-encoded password.
- generateSalt() - Method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
- generateSalt() - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
Returns the full salt in a byte[] for this cipher provider (i.e.
- generateSalt(EncryptionMethod) - Method in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
- generateSalt() - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- generateSalt() - Method in interface org.apache.nifi.security.util.crypto.PBECipherProvider
-
Returns a random salt suitable for this cipher provider.
- generateSalt() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- generateSalt() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- generateSecureRandomPassword() - Method in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
- generateSelfSignedX509Certificate(KeyPair, String, String, int) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Generates a self-signed
X509Certificate suitable for use as a Certificate Authority.
- generateSelfSignedX509Certificate(KeyPair, String, String, int, String[]) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Generates a self-signed
X509Certificate suitable for use as a Certificate Authority.
- generateTempKeystorePath(KeystoreType) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Generates a temporary keystore file and returns the path.
- generateTempTruststorePath(KeystoreType) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Generates a temporary truststore file and returns the path.
- getAlgorithm() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- getAlgorithmName() - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns the algorithm-specific name for logging and messages.
- getAlgorithmName() - Method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Returns the algorithm-specific name for logging and messages.
- getAlgorithmName() - Method in class org.apache.nifi.security.util.crypto.BcryptSecureHasher
-
Returns the algorithm-specific name for logging and messages.
- getAlgorithmName() - Method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Returns the algorithm-specific name for logging and messages.
- getAlgorithmName() - Method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
- getCipher(EncryptionMethod, SecretKey, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, SecretKey, boolean) - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, SecretKey, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.KeyedCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, SecretKey, boolean) - Method in class org.apache.nifi.security.util.crypto.KeyedCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, boolean) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
Convenience method without key length parameter.
- getCipher(EncryptionMethod, String, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
Convenience method without key length parameter.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in interface org.apache.nifi.security.util.crypto.PBECipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.RandomIVPBECipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipherProvider(KeyDerivationFunction) - Static method in class org.apache.nifi.security.util.crypto.CipherProviderFactory
-
- getClientAuthStatus(SSLSocket) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
- getCommonName(String) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Extracts the common name from the given DN.
- getDefaultKeyLengthForCipher(String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns the algorithm-specific default salt length in bytes.
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Returns the algorithm-specific default salt length in bytes.
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.BcryptSecureHasher
-
Returns the algorithm-specific default salt length in bytes.
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- getDefaultSaltLength() - Method in interface org.apache.nifi.security.util.crypto.PBECipherProvider
-
Returns the default salt length for this implementation.
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Returns the algorithm-specific default salt length in bytes.
- getDefaultSaltLength() - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Returns the algorithm-specific default salt length in bytes.
- getDescription() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
- getDescription() - Method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
- getDigestBytesLength() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
- getEnabledProtocols() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Get Enabled TLS Protocols translates SSL to legacy protocols and TLS to current protocols or returns configured protocol
- getExtensionsFromCSR(JcaPKCS10CertificationRequest) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Extract extensions from CSR object
- getFileUrl(String) - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getFunctionalKeyPassword() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getFunctionalKeyPasswordForLogging() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns "********" if the functional key password is populated, "null" if not.
- getGroupMappings(NiFiProperties) - Static method in class org.apache.nifi.authorization.util.IdentityMappingUtil
-
Buils the group mappings from NiFiProperties.
- getIdentityMappings(NiFiProperties) - Static method in class org.apache.nifi.authorization.util.IdentityMappingUtil
-
Builds the identity mappings from NiFiProperties.
- getInitializedCipher(EncryptionMethod, SecretKey, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- getInitializedCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
- getInitializedCipher(EncryptionMethod, String, byte[], byte[], int, boolean, boolean) - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
- getInitializedCipher(EncryptionMethod, String, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- getInitializedCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getInitializedCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getIterationCount() - Method in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
- getIterationCount() - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- getIterationCount() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getIterations() - Method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
- getKdfName() - Method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
- getKey() - Method in class org.apache.nifi.authorization.util.IdentityMapping
-
- getKeyManagerFactoryFromKeyStore(KeyStore, char[], char[]) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
- getKeyManagers(TlsConfiguration) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Returns an array of
KeyManagers for the provided configuration.
- getKeyPassword() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getKeyPasswordForLogging() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns "********" if the key password is populated, "null" if not.
- getKeyStore(String) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns an empty KeyStore backed by the appropriate provider
- getKeystoreExtension(KeystoreType) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns the Keystore extension given the Keystore type.
- getKeystorePassword() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getKeystorePasswordForLogging() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns "********" if the keystore password is populated, "null" if not.
- getKeystorePath() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getKeystorePropertiesForLogging() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns a String[] containing the keystore properties for logging.
- getKeyStoreProvider(String) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns the provider that will be used for the given keyStoreType
- getKeyStoreType() - Method in class org.apache.nifi.security.configuration.KeyStoreConfiguration
-
- getKeystoreType(String) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
- getKeystoreType() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getKeystoreTypeFromExtension(String) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Get Keystore Type based on file extension defaults to returning PKCS12
- getLegacyDecryptCipher(EncryptionMethod, String, byte[], byte[], int) - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
Returns a
Cipher instance in
Cipher.DECRYPT_MODE configured with the provided inputs and using
the
legacy key derivation process for Bcrypt where the complete Bcrypt hash output (including algorithm, work
factor, and salt) was used as the input to the key stretching SHA-512 digest function.
- getLocation() - Method in class org.apache.nifi.security.configuration.KeyStoreConfiguration
-
- getLogger() - Method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
- getLogger() - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
- getLogger() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getLogger() - Method in class org.apache.nifi.security.util.crypto.RandomIVPBECipherProvider
-
- getLogger() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getMappings(NiFiProperties, String, String, String, Supplier<String>) - Static method in class org.apache.nifi.authorization.util.IdentityMappingUtil
-
- getMaxDKLength(int) - Static method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Returns the maximum length of the derived key in bytes given the digest length in bytes of the underlying PRF.
- getMaximumPasswordLengthForAlgorithmOnLimitedStrengthCrypto(EncryptionMethod) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
- getMaxSaltLength() - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns the algorithm-specific maximum salt length in bytes.
- getMaxSaltLength() - Method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Returns the algorithm-specific maximum salt length in bytes.
- getMaxSaltLength() - Method in class org.apache.nifi.security.util.crypto.BcryptSecureHasher
-
Returns the algorithm-specific maximum salt length in bytes.
- getMaxSaltLength() - Method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Returns the algorithm-specific maximum salt length in bytes.
- getMaxSaltLength() - Method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
- getMemory() - Method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
- getMessageDigest() - Method in class org.apache.nifi.security.util.crypto.KeyDerivationBcryptSecureHasher
-
- getMinSaltLength() - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns the algorithm-specific minimum salt length in bytes.
- getMinSaltLength() - Method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Returns the algorithm-specific minimum salt length in bytes.
- getMinSaltLength() - Method in class org.apache.nifi.security.util.crypto.BcryptSecureHasher
-
Returns the algorithm-specific minimum salt length in bytes.
- getMinSaltLength() - Method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Returns the algorithm-specific minimum salt length in bytes.
- getMinSaltLength() - Method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
- getN() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getName() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
- getNewKeyStore(String) - Method in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
- getP() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getParallelism() - Method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
- getPassword() - Method in class org.apache.nifi.security.configuration.KeyStoreConfiguration
-
- getPattern() - Method in class org.apache.nifi.authorization.util.IdentityMapping
-
- getPRFName() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getProtocol() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getProvider() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- getR() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getReplacementValue() - Method in class org.apache.nifi.authorization.util.IdentityMapping
-
- getSalt() - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns a salt to use.
- getSaltLengthForAlgorithm(String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns the salt length for various PBE algorithms.
- getSecretKeyStore(String) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns an empty KeyStore for Secret Keys backed by the appropriate provider
- getSecureHasher(String) - Static method in class org.apache.nifi.security.util.crypto.SecureHasherFactory
-
- getSubjectAlternativeNames(X509Certificate) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Returns a list of subject alternative names.
- getSupportedCharsets() - Static method in class org.apache.nifi.security.util.crypto.HashService
-
- getTimestampString() - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns the current timestamp in a default format.
- getTransform() - Method in class org.apache.nifi.authorization.util.IdentityMapping
-
- getTrustManagerFactoryFromTrustStore(KeyStore) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
- getTrustManagers(TlsConfiguration) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Returns an array of
TrustManager implementations based on the provided truststore configurations.
- getTruststorePassword() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getTruststorePasswordForLogging() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns "********" if the truststore password is populated, "null" if not.
- getTruststorePath() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getTruststorePropertiesForLogging() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns a String[] containing the truststore properties for logging.
- getTruststoreType() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- getUniqueSerialNumber() - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Generates a unique serial number by using the current time in milliseconds left shifted 32 bits (to make room for incrementor) with an incrementor added
- getValidKeyLengthsForAlgorithm(String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns a list of valid key lengths in bits for this algorithm.
- getWorkFactor() - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
- getX509TrustManager(TlsConfiguration) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
- hasFormattedSalt() - Method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
- hash(byte[]) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns the algorithm-specific calculated hash for the input and generates or retrieves the salt according to
the configured salt length.
- hash(byte[], byte[]) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns the algorithm-specific calculated hash for the input and salt.
- hash(byte[]) - Method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Internal method to hash the raw bytes.
- hash(byte[], byte[]) - Method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Internal method to hash the raw bytes.
- hash(byte[]) - Method in class org.apache.nifi.security.util.crypto.BcryptSecureHasher
-
Internal method to hash the raw bytes.
- hash(byte[], byte[]) - Method in class org.apache.nifi.security.util.crypto.BcryptSecureHasher
-
Internal method to hash the raw bytes.
- hash(byte[], byte[]) - Method in class org.apache.nifi.security.util.crypto.KeyDerivationBcryptSecureHasher
-
Hash raw bytes using provided salt and then leverage SHA-512 to digest the results and truncate to length requested
- hash(byte[]) - Method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Internal method to hash the raw bytes.
- hash(byte[], byte[]) - Method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Internal method to hash the raw bytes.
- hash(byte[]) - Method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Internal method to hash the raw bytes.
- hash(byte[], byte[]) - Method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Internal method to hash the raw bytes.
- HASH_START_INDEX - Static variable in class org.apache.nifi.security.util.crypto.KeyDerivationBcryptSecureHasher
-
- HashAlgorithm - Enum in org.apache.nifi.security.util.crypto
-
Enumeration capturing information about the cryptographic hash algorithms
- HashAlgorithm(String, int, String) - Constructor for enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
- hashBase64(String) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns a String representation of the hash in Base 64-encoded format.
- hashBase64(String, String) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns a String representation of the hash in Base 64-encoded format.
- hashBase64(String) - Method in interface org.apache.nifi.security.util.crypto.SecureHasher
-
Returns a String representation of CHF(input) in Base 64-encoded format.
- hashBase64(String, String) - Method in interface org.apache.nifi.security.util.crypto.SecureHasher
-
Returns a String representation of CHF(input) in Base 64-encoded format.
- hashCode() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- hashHex(String) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns a String representation of the hash in hex-encoded format.
- hashHex(String, String) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns a String representation of the hash in hex-encoded format.
- hashHex(String) - Method in interface org.apache.nifi.security.util.crypto.SecureHasher
-
Returns a String representation of CHF(input) in hex-encoded format.
- hashHex(String, String) - Method in interface org.apache.nifi.security.util.crypto.SecureHasher
-
Returns a String representation of CHF(input) in hex-encoded format.
- hashLength - Variable in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
- hashRaw(byte[]) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns a byte[] representation of SecureHasher.hash(input).
- hashRaw(byte[], byte[]) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns a byte[] representation of SecureHasher.hash(input).
- hashRaw(byte[]) - Method in interface org.apache.nifi.security.util.crypto.SecureHasher
-
Returns a byte[] representation of CHF(input).
- hashRaw(byte[], byte[]) - Method in interface org.apache.nifi.security.util.crypto.SecureHasher
-
Returns a byte[] representation of CHF(input).
- HashService - Class in org.apache.nifi.security.util.crypto
-
This class provides a generic service for cryptographic hashing.
- HashService() - Constructor for class org.apache.nifi.security.util.crypto.HashService
-
- hashValue(HashAlgorithm, String, Charset) - Static method in class org.apache.nifi.security.util.crypto.HashService
-
Returns the hex-encoded hash of the specified value.
- hashValue(HashAlgorithm, String) - Static method in class org.apache.nifi.security.util.crypto.HashService
-
Returns the hex-encoded hash of the specified value.
- hashValueRaw(HashAlgorithm, String, Charset) - Static method in class org.apache.nifi.security.util.crypto.HashService
-
Returns the raw byte[] hash of the specified value.
- hashValueRaw(HashAlgorithm, String) - Static method in class org.apache.nifi.security.util.crypto.HashService
-
Returns the raw byte[] hash of the specified value.
- hashValueRaw(HashAlgorithm, byte[]) - Static method in class org.apache.nifi.security.util.crypto.HashService
-
Returns the raw byte[] hash of the specified value.
- hashValueStreaming(HashAlgorithm, InputStream) - Static method in class org.apache.nifi.security.util.crypto.HashService
-
Returns the hash of the specified value.
- hostname - Variable in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
- hostname(String) - Method in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
Set Hostname used for Certificate Common Name and DNS Subject Alternative Names
- IdentityMapping - Class in org.apache.nifi.authorization.util
-
Holder to pass around the key, pattern, and replacement from an identity mapping in NiFiProperties.
- IdentityMapping(String, Pattern, String) - Constructor for class org.apache.nifi.authorization.util.IdentityMapping
-
- IdentityMapping(String, Pattern, String, IdentityMapping.Transform) - Constructor for class org.apache.nifi.authorization.util.IdentityMapping
-
- IdentityMapping.Transform - Enum in org.apache.nifi.authorization.util
-
- IdentityMappingUtil - Class in org.apache.nifi.authorization.util
-
- IdentityMappingUtil() - Constructor for class org.apache.nifi.authorization.util.IdentityMappingUtil
-
- initializeSalt(Integer) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Verifies the salt length is valid for this algorithm and if a static salt should be used.
- initializeSSLContext(TlsConfiguration, KeyManager[], TrustManager[]) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
- integerify(byte[], int, int) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- isAnyKeystorePopulated() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns true if any of the keystore properties is populated, indicating that the caller expects a valid keystore to be generated.
- isAnyPopulated(String, String, KeystoreType) - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- isAnyTruststorePopulated() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns true if any of the truststore properties is populated, indicating that the caller expects a valid truststore to be generated.
- isArgon2FormattedSalt(String) - Static method in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
Returns true if the salt string is a valid Argon2 salt string ($argon2id$v=19$m=4096,t=3,p=1$abcdefghi..{22}).
- isBcryptFormattedSalt(String) - Static method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
Returns true if the salt string is a valid Bcrypt salt string ($2a$10$abcdefghi..{22}).
- isBlake2() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
Returns true if this hash algorithm is Blake2, as it requires different initialization through BouncyCastle.
- isCompatibleWithStrongKDFs() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- isCostValid(Integer) - Static method in class org.apache.nifi.security.util.crypto.BcryptSecureHasher
-
Returns true if the provided cost factor is within boundaries.
- isDKLengthValid(int, Integer) - Static method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Returns whether the provided hash (derived key) length is within boundaries given the configured PRF.
- isDKLengthValid(Integer) - Static method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Returns whether the provided hash (derived key) length is within boundaries.
- isHashLengthValid(Integer) - Static method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Returns whether the provided hash length is within boundaries.
- isIterationCountValid(Integer) - Static method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Returns true if the provided cost factor is within boundaries.
- isIterationsValid(Integer) - Static method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Returns whether the provided iteration count is within boundaries.
- isKeyedCipher() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- isKeyPasswordCorrect(URL, KeystoreType, char[], char[]) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns true if the given keystore can be loaded using the given keystore type and password and the default
(first) alias can be retrieved with the key-specific password.
- isKeystorePopulated() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns true if the necessary properties are populated to instantiate a keystore.
- isKeystoreValid() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns true if the necessary properties are populated and the keystore can be successfully instantiated (i.e.
- isMemorySizeValid(Integer) - Static method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Returns whether the provided memory size is within boundaries.
- isNValid(Integer, int) - Static method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Returns true if the provided iteration count N is within boundaries.
- isParallelismValid(int) - Static method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Returns whether the provided parallelization factor is within boundaries.
- isPBECipher() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- isPValid(int, int) - Static method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Returns whether the provided parallelization factor (p value) is within boundaries.
- isPValid(int, int) - Static method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Returns true if the provided parallelization factor is within boundaries.
- isRValid(int) - Static method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Returns whether the provided block size (r value) is a positive integer or not.
- isRValid(int) - Static method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Returns true if the provided block size in bytes is within boundaries.
- isSaltLengthValid(Integer) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns whether the provided salt length (saltLength) is within boundaries.
- isScryptFormattedSalt(String) - Static method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Returns true if the salt string is a valid Scrypt salt string ($s0$e0801$abcdefghi..{22}).
- isSecretKeyEntrySupported(KeystoreType) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Is Secret Key Entry supported for specified Keystore Type
- isStorePopulated(String, String, KeystoreType, StandardTlsConfiguration.StoreType) - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- isStoreValid(URL, KeystoreType, char[]) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns true if the given keystore can be loaded using the given keystore type and password.
- isStoreValid(String, String, KeystoreType, StandardTlsConfiguration.StoreType) - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
- isStrongAlgorithm() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
Returns true if this algorithm is considered cryptographically secure.
- isStrongKDF() - Method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
- isTlsError(Throwable) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Returns true if this exception is due to a TLS problem (either directly or because of its cause, if present).
- isTruststorePopulated() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns true if the necessary properties are populated to instantiate a truststore.
- isTruststoreValid() - Method in class org.apache.nifi.security.util.StandardTlsConfiguration
-
Returns true if the necessary properties are populated and the truststore can be successfully instantiated (i.e.
- isUnlimitedStrength() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- isUsingStaticSalt() - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns true if this instance is configured to use a static salt.
- isValidKeyLength(SecretKey) - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- isValidKeyLength(int, String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns true if the provided key length is a valid key length for the provided cipher family.
- isValidKeyLengthForAlgorithm(int, String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns true if the provided key length is a valid key length for the provided algorithm.
- ITERATION_COUNT - Static variable in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
- ITERATION_COUNT - Static variable in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- iterationCount - Variable in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- iterationCount - Variable in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
- iterations - Variable in class org.apache.nifi.security.util.crypto.Argon2CipherProvider
-
- iterations - Variable in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
- IV_DELIMITER - Static variable in class org.apache.nifi.security.util.crypto.KeyedCipherProvider
-
- IV_DELIMITER - Static variable in class org.apache.nifi.security.util.crypto.RandomIVPBECipherProvider
-
- IV_LENGTH - Static variable in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- salsa20_8(byte[]) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- SALT_DELIMITER - Static variable in class org.apache.nifi.security.util.crypto.RandomIVPBECipherProvider
-
- saltLength - Variable in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
- Scrypt - Class in org.apache.nifi.security.util.crypto.scrypt
-
Copyright (C) 2011 - Will Glozer.
- Scrypt() - Constructor for class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- scrypt(String, int, int, int, int) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
Hash the supplied plaintext password and generate output in the format described
below:
The hashed output is an
extended implementation of the Modular Crypt Format that also includes the scrypt
algorithm parameters.
- scrypt(String, byte[], int, int, int, int) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- scrypt(byte[], byte[], int, int, int, int) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
Hash the supplied input and generate raw unencoded output.
- SCRYPT_PATTERN - Static variable in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- SCRYPT_SALT_FORMAT - Static variable in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- ScryptCipherProvider - Class in org.apache.nifi.security.util.crypto
-
- ScryptCipherProvider() - Constructor for class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Instantiates a Scrypt cipher provider with the default parameters N=2^14, r=8, p=1.
- ScryptCipherProvider(int, int, int) - Constructor for class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Instantiates a Scrypt cipher provider with the specified N, r, p values.
- ScryptSecureHasher - Class in org.apache.nifi.security.util.crypto
-
Provides an implementation of Scrypt for secure password hashing.
- ScryptSecureHasher() - Constructor for class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
- ScryptSecureHasher(int) - Constructor for class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Instantiates an Scrypt secure hasher using the default cost parameters and specified derived key length
- ScryptSecureHasher(int, int, int, int) - Constructor for class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Instantiates an Scrypt secure hasher using the provided cost parameters.
- ScryptSecureHasher(int, int, int, int, int) - Constructor for class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Instantiates an Scrypt secure hasher using the provided cost parameters.
- SECRET_KEY_STORE_PROVIDERS - Static variable in class org.apache.nifi.security.util.KeyStoreUtils
-
- SecureHasher - Interface in org.apache.nifi.security.util.crypto
-
An interface which specifies that implementations should provide a
cryptographic hash function (CHF) which accepts input and returns a
deterministic, (mathematically-difficult) irreversible value.
- SecureHasherException - Exception in org.apache.nifi.security.util.crypto
-
Exception indicating an error occurred instantiating a SecureHasher.
- SecureHasherException(String) - Constructor for exception org.apache.nifi.security.util.crypto.SecureHasherException
-
- SecureHasherException(String, Throwable) - Constructor for exception org.apache.nifi.security.util.crypto.SecureHasherException
-
- SecureHasherFactory - Class in org.apache.nifi.security.util.crypto
-
Provides a factory for SecureHasher implementations.
- SecureHasherFactory() - Constructor for class org.apache.nifi.security.util.crypto.SecureHasherFactory
-
- serialNumberIncrementor - Static variable in class org.apache.nifi.security.util.CertificateUtils
-
An incrementor to add uniqueness to serial numbers generated in the same millisecond
- serialVersionUID - Static variable in exception org.apache.nifi.security.util.crypto.SecureHasherException
-
- setKeyStore(PrivateKey, X509Certificate) - Method in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
- setTrustStore(X509Certificate) - Method in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
- SIGNING_ALGORITHM - Static variable in class org.apache.nifi.security.util.KeyStoreUtils
-
- SIGNING_ALGORITHM - Static variable in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
- smix(byte[], int, int, int, byte[], byte[]) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- SslContextFactory - Class in org.apache.nifi.security.util
-
A factory for creating SSL contexts using the application's security properties.
- SslContextFactory() - Constructor for class org.apache.nifi.security.util.SslContextFactory
-
- sslContextToString(SSLContext) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
- sslServerSocketToString(SSLServerSocket) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
- StandardTlsConfiguration - Class in org.apache.nifi.security.util
-
This class serves as a concrete immutable domain object (acting as an internal DTO)
for the various keystore and truststore configuration settings necessary for
building
SSLContexts.
- StandardTlsConfiguration() - Constructor for class org.apache.nifi.security.util.StandardTlsConfiguration
-
Default constructor present for testing and completeness.
- StandardTlsConfiguration(String, String, KeystoreType, String, String, KeystoreType) - Constructor for class org.apache.nifi.security.util.StandardTlsConfiguration
-
Instantiates a container object with the given configuration values.
- StandardTlsConfiguration(String, String, String, KeystoreType, String, String, KeystoreType) - Constructor for class org.apache.nifi.security.util.StandardTlsConfiguration
-
Instantiates a container object with the given configuration values.
- StandardTlsConfiguration(String, String, String, String, String, String, String) - Constructor for class org.apache.nifi.security.util.StandardTlsConfiguration
-
Instantiates a container object with the given configuration values.
- StandardTlsConfiguration(String, String, String, String, String, String, String, String) - Constructor for class org.apache.nifi.security.util.StandardTlsConfiguration
-
Instantiates a container object with the given configuration values.
- StandardTlsConfiguration(String, String, String, KeystoreType, String, String, KeystoreType, String) - Constructor for class org.apache.nifi.security.util.StandardTlsConfiguration
-
Instantiates a container object with the given configuration values.
- StandardTlsConfiguration(TlsConfiguration) - Constructor for class org.apache.nifi.security.util.StandardTlsConfiguration
-
Instantiates a container object with a deep copy of the given configuration values.
- StandardTlsConfiguration.StoreType - Enum in org.apache.nifi.security.util
-
- STATIC_SALT - Static variable in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
- storeKeyStore(KeyStore, char[]) - Method in class org.apache.nifi.security.util.TemporaryKeyStoreBuilder
-
- StoreType() - Constructor for enum org.apache.nifi.security.util.StandardTlsConfiguration.StoreType
-
- SUN_JSSE_PROVIDER_NAME - Static variable in class org.apache.nifi.security.util.KeyStoreUtils
-
- SUN_PROVIDER_NAME - Static variable in class org.apache.nifi.security.util.KeyStoreUtils
-
- VALID_KEY_LENGTHS - Static variable in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- validateInput(String) - Method in class org.apache.nifi.security.util.crypto.AbstractSecureHasher
-
Returns the valid
input String (if the algorithm accepts empty input, changes
null to
""; if not, throws
IllegalArgumentException).
- validateParameters(Integer, Integer, int, Integer, Integer) - Method in class org.apache.nifi.security.util.crypto.Argon2SecureHasher
-
Enforces valid Argon2 secure hasher cost parameters are provided.
- validateParameters(Integer, Integer) - Method in class org.apache.nifi.security.util.crypto.BcryptSecureHasher
-
Enforces valid Scrypt secure hasher cost parameters are provided.
- validateParameters(String, Integer, int, int) - Method in class org.apache.nifi.security.util.crypto.PBKDF2SecureHasher
-
Enforces valid PBKDF2 secure hasher cost parameters are provided.
- validateParameters(Integer, Integer, int, Integer, Integer) - Method in class org.apache.nifi.security.util.crypto.ScryptSecureHasher
-
Enforces valid Scrypt secure hasher cost parameters are provided.
- validateSalt(EncryptionMethod, byte[]) - Method in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
- validateSalt(EncryptionMethod, byte[]) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- valueOf(String) - Static method in enum org.apache.nifi.authorization.util.IdentityMapping.Transform
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.EncryptionMethod
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.StandardTlsConfiguration.StoreType
-
Returns the enum constant of this type with the specified name.
- values() - Static method in enum org.apache.nifi.authorization.util.IdentityMapping.Transform
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.EncryptionMethod
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.StandardTlsConfiguration.StoreType
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- verifyHashFormat(String) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
Returns true if the provided hash is a valid scrypt hash.