Skip to main content

EncryptContent

描述:

加密或解密数据流,使用密码和随机生成的盐的对称加密方式,或使用公钥和私钥的非对称加密方式。

标签:

加密,解密,密码,JCE, OpenPGP, PGP, GPG

参数:

如下列表中,必填参数则标识为加粗. 其他未加粗参数,则表示为可选参数。表中同时提到参数默认值设置, 参数还支持 表达式语言, 并且 如果将一个参数认定为"敏感", 表示是加密状态. 在输入一个敏感参数时, 确保 orchsym.properties 文件中存在属性设置 orchsym.sensitive.props.key.

名字默认值允许值列表描述
模式加密
- 加密
- 解密
指定内容是否应该被加密或解密
密钥导出函数Bcrypt
- NiFi原有密钥导出函数(KDF)MD5 @ 1000 次迭代
- OpenSSL EVP_BytesToKey单次迭代与PKCS#5 v1.5兼容的MD5
- Bcrypt具有可配置工作因子的Bcrypt
- Scrypt具有可配置成本参数的Scrypt
- PBKDF2具有可配置哈希函数和迭代次数的PBKDF2
- None密码被赋予符合算法规范的原始密钥
指定密钥导出函数,用以从密码(或盐)生成密钥
加密算法MD5_128AES
- MD5_128AESEncryptionMethod[Algorithm name=PBEWITHMD5AND128BITAES-CBC-OPENSSL,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- MD5_192AESEncryptionMethod[Algorithm name=PBEWITHMD5AND192BITAES-CBC-OPENSSL,Requires unlimited strength JCE policy=true,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- MD5_256AESEncryptionMethod[Algorithm name=PBEWITHMD5AND256BITAES-CBC-OPENSSL,Requires unlimited strength JCE policy=true,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- MD5_DESEncryptionMethod[Algorithm name=PBEWITHMD5ANDDES,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- MD5_RC2EncryptionMethod[Algorithm name=PBEWITHMD5ANDRC2,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA1_RC2EncryptionMethod[Algorithm name=PBEWITHSHA1ANDRC2,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA1_DESEncryptionMethod[Algorithm name=PBEWITHSHA1ANDDES,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_128AESEncryptionMethod[Algorithm name=PBEWITHSHAAND128BITAES-CBC-BC,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_192AESEncryptionMethod[Algorithm name=PBEWITHSHAAND192BITAES-CBC-BC,Requires unlimited strength JCE policy=true,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_256AESEncryptionMethod[Algorithm name=PBEWITHSHAAND256BITAES-CBC-BC,Requires unlimited strength JCE policy=true,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_40RC2EncryptionMethod[Algorithm name=PBEWITHSHAAND40BITRC2-CBC,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_128RC2EncryptionMethod[Algorithm name=PBEWITHSHAAND128BITRC2-CBC,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_40RC4EncryptionMethod[Algorithm name=PBEWITHSHAAND40BITRC4,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_128RC4EncryptionMethod[Algorithm name=PBEWITHSHAAND128BITRC4,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA256_128AESEncryptionMethod[Algorithm name=PBEWITHSHA256AND128BITAES-CBC-BC,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA256_192AESEncryptionMethod[Algorithm name=PBEWITHSHA256AND192BITAES-CBC-BC,Requires unlimited strength JCE policy=true,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA256_256AESEncryptionMethod[Algorithm name=PBEWITHSHA256AND256BITAES-CBC-BC,Requires unlimited strength JCE policy=true,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_2KEYTRIPLEDESEncryptionMethod[Algorithm name=PBEWITHSHAAND2-KEYTRIPLEDES-CBC,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_3KEYTRIPLEDESEncryptionMethod[Algorithm name=PBEWITHSHAAND3-KEYTRIPLEDES-CBC,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- SHA_TWOFISHEncryptionMethod[Algorithm name=PBEWITHSHAANDTWOFISH-CBC,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- PGPEncryptionMethod[Algorithm name=PGP,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- PGP_ASCII_ARMOREncryptionMethod[Algorithm name=PGP-ASCII-ARMOR,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=false,Keyed cipher=false]
- AES_CBCEncryptionMethod[Algorithm name=AES/CBC/PKCS7Padding,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=true,Keyed cipher=true]
- AES_CTREncryptionMethod[Algorithm name=AES/CTR/NoPadding,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=true,Keyed cipher=true]
- AES_GCMEncryptionMethod[Algorithm name=AES/GCM/NoPadding,Requires unlimited strength JCE policy=false,Algorithm Provider=BC,Compatible with strong KDFs=true,Keyed cipher=true]
使用的加密算法
允许不安全的加密模式不允许
- 允许当提供加密算法和密码的不安全组合时,不会阻止操作并且不会显示警报
- 不允许设置后,如果在具有有限强度加密的JVM上提供加密算法和密码的不安全组合,将阻止操作并向用户呈现警报。
覆盖默认行为,以防止JVM上带有有限强度加密管辖权策略的加密算法和短密码的不安全组合
密码用于加密或解密数据的密码

敏感状态
原始密钥(十六进制)在密钥加密中,这是以十六进制编码的原始密钥

敏感状态
公开密钥环文件PGP加密模式中,此密钥环包含接收者的公钥
公钥用户IDPGP加密模式中,接收者的用户ID
秘密密钥环文件PGP解密模式中,此密钥环包含接收者的私钥
秘密密钥环密码PGP解密模式中,秘密密钥环的密码

敏感状态
支持表达式语言 (仅支持变量)

连线:

名字描述
success成功被加密或解密的数据流将被路由到此连线
failure不能被加密或解密的数据流将被路由到此连线

读取属性:

未提供。

写入属性:

未提供。

状态管理:

该组件不保存状态。

限制:

该组件没有限制

输入流要求:

组件必须提供输入流。

系统资源考量:

资源描述
CPU此组件的实例可能导致系统资源的高使用率。多个实例或高并发设置可能会导致性能下降。