-
Type: Improvement
-
Status: Resolved
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: 2021.0
-
Component/s: BlobManager
From https://answers.nuxeo.com/general/q/2074bbcb3b4140108f3ae51ebbb53533/AES-Decryption-performance it has been reported that
https://stackoverflow.com/questions/60575897/cipherinputstream-hangs-while-reading-data tells about known problems with CipherInputStream class for decryption of large files. The link https://crypto.stackexchange.com/questions/20333/encryption-of-big-files-in-java-with-aes-gcm confirm that “CipherInputStream in general is horrible”.
As some customers are using the AES binary manager to store encrypted files, Nuxeo should use BouncyCastle instead of the JDK API to decrypt files
- links to