accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Adam Fuchs (JIRA)" <>
Subject [jira] [Commented] (ACCUMULO-998) support encryption at rest
Date Thu, 31 Jan 2013 19:33:12 GMT


Adam Fuchs commented on ACCUMULO-998:

Dave: In my opinion, it makes sense to start this out at the database level. However, we might
want to look at moving to per-table or per-locality group configuration in the future.

There are basically two modes for Accumulo's file I/O. One is for the WAL: append until full,
then (maybe) read the whole thing in all at once. The other is for RFile and MapFile: write
all at once and potentially seek many times. RFile and MapFile are block compressed, which
is a natural extension point for encryption. Mike is working on an implementation that essentially
wraps the block writer in a cipher stream. The WAL encryption patch wraps the entire file
in a cipher stream, so it's a very similar implementation modulo blockiness.
> support encryption at rest
> --------------------------
>                 Key: ACCUMULO-998
>                 URL:
>             Project: Accumulo
>          Issue Type: Improvement
>            Reporter: Adam Fuchs
>            Assignee: Adam Fuchs
>             Fix For: 1.6.0
> Support encryption of all data (key/value entries) stored by Accumulo in external systems.
This includes the following sub-tickets:
> ACCUMULO-958: encrypt Write-Ahead Logs (WALs)
> ACCUMULO-980: encrypt RFiles
> ACCUMULO-981: encrypt sorted, recovered WALs

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:

View raw message