Return-Path: X-Original-To: apmail-accumulo-notifications-archive@minotaur.apache.org Delivered-To: apmail-accumulo-notifications-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C2C1C1048C for ; Thu, 11 Apr 2013 17:35:15 +0000 (UTC) Received: (qmail 35592 invoked by uid 500); 11 Apr 2013 17:35:15 -0000 Delivered-To: apmail-accumulo-notifications-archive@accumulo.apache.org Received: (qmail 35553 invoked by uid 500); 11 Apr 2013 17:35:15 -0000 Mailing-List: contact notifications-help@accumulo.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: jira@apache.org Delivered-To: mailing list notifications@accumulo.apache.org Received: (qmail 35541 invoked by uid 99); 11 Apr 2013 17:35:15 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 11 Apr 2013 17:35:15 +0000 Date: Thu, 11 Apr 2013 17:35:15 +0000 (UTC) From: "Michael Allen (JIRA)" To: notifications@accumulo.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (ACCUMULO-958) Support pluggable encryption in walogs MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/ACCUMULO-958?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13629141#comment-13629141 ] Michael Allen commented on ACCUMULO-958: ---------------------------------------- The encryption happens after the compression in my current patch. And yeah, encrypted data should compress very very badly, by design. :) > Support pluggable encryption in walogs > -------------------------------------- > > Key: ACCUMULO-958 > URL: https://issues.apache.org/jira/browse/ACCUMULO-958 > Project: Accumulo > Issue Type: Improvement > Components: logger > Reporter: John Vines > Assignee: Michael Allen > Fix For: 1.6.0 > > Attachments: ACCUMULO-958-actual-changes.patch, accumulo-958.diff, accumulo-958-patch.diff, Improving-Crypto-Module-Interface-v1.2.pdf > > > There are some cases where users want encryption at rest for the walogs. It should be fairly trivial to implement it in such a way to insert a CipherOutputStream into the data path (defaulting to using a NullCipher) and then making the Cipher pluggable to users can insert the appropriate mechanisms for their use case. > This also means swapping in CipherInputStream and putting in a check to make sure the Cipher type's match at read and write time. Possibly a versioning mechanism so people can migrate Ciphers. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira