Appian Community and Appian Academy are being upgraded. As a part of the upgrade, Appian Community is currently in read-only mode, and user registration is disabled until August 3. We apologize for any inconvenience this may cause, but a more secure, stable, and performant Community experience is coming soon!
The new Appian Community launches August 3, followed by Appian Academy on August 7. During the migration, Appian Community Edition, Appian Academy, Documentation, Certifications, Instructor-led Customer Training, Partner Sales Training & Accreditation, and Forum (for Appian Partners and Customers only) will remain available.
Overview
Allows for the encryption and decryption of text data using symmetric AES encryption. This plug-in uses standard Java cryptography functions to expose expression functions for the encryption and decryption of data using AES.
Key Features & Functionality
Functions:
Features:
Hello,
This plugin was added to an agency repository for code scanning by sonarQube and the following High severity issue was detected
Encryption algorithms should be used with secure mode and padding scheme
This issue is displayed in the directory Encryption-Functions/src/com/appiansolutionengineering/encryption/EncryptionHelper.javaat line 178 cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
Can someone let us know if this is something that can be updated to no longer have the vulnerability appear by the scan
is this plugin compatible for 24.2 version ???
This has been resolved. Please let us know if you have any additional questions.
I second what Frans noted.
Even after deleting the plugin and adding it again, immediately an 'update available' warning appears.
This is the only plugin I know of having this issue.
Please provide an update to resolve this issue.
There seems to be an issue in this version. After the update through Admin console the version shows as 1.1.1 not 1.1.0 and the update available flag keeps showing:
Support for high volume encryption use cases. This version includes a (1 minute) cache for encryption key retrieval
Were you ever able to figure this out?
Do you know how can I tell if a string is encrypted or not? For example, if I encrypt a text and want to display the actual value, I need to decrypt it. But if the text was not encrypted before and I use the decrypt function, it will throw an error. So we need: if encrypted, then use decrypt function else just display the value. How can we do this?