hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tianyou Li (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HADOOP-9331) Hadoop crypto codec framework and crypto codec implementations
Date Tue, 03 Dec 2013 02:02:38 GMT

     [ https://issues.apache.org/jira/browse/HADOOP-9331?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Tianyou Li updated HADOOP-9331:
-------------------------------

    Description: 
 For use cases that deal with sensitive data, we often need to encrypt data to be stored safely
at rest. Hadoop common provides a codec framework for compression algorithms. We start here.
However because encryption algorithms require some additional configuration and methods for
key management, we introduce a crypto codec framework that builds on the compression codec
framework. It cleanly distinguishes crypto algorithms from compression algorithms, but shares
common interfaces between them where possible, and also carries extended interfaces where
necessary to satisfy those needs. We also introduce a generic Key type, and supporting utility
methods and classes, as a necessary abstraction for dealing with both Java crypto keys and
PGP keys.

The task for this feature breaks into two parts:
1. The crypto codec framework that based on compression codec which can be shared by all crypto
codec implementations.
2. The codec implementations such as AES and others.

  was:
For use cases that deal with sensitive data, we often need to encrypt data to be stored safely
at rest. Hadoop common provides a codec framework for compression algorithms. We start here.
However because encryption algorithms require some additional configuration and methods for
key management, we introduce a crypto codec framework that builds on the compression codec
framework. It cleanly distinguishes crypto algorithms from compression algorithms, but shares
common interfaces between them where possible, and also carries extended interfaces where
necessary to satisfy those needs. We also introduce a generic Key type, and supporting utility
methods and classes, as a necessary abstraction for dealing with both Java crypto keys and
PGP keys.

The task for this feature breaks into two parts:
1. The crypto codec framework that based on compression codec which can be shared by all crypto
codec implementations.
2. The codec implementations such as AES and others.


> Hadoop crypto codec framework and crypto codec implementations
> --------------------------------------------------------------
>
>                 Key: HADOOP-9331
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9331
>             Project: Hadoop Common
>          Issue Type: New Feature
>          Components: security
>    Affects Versions: 3.0.0
>            Reporter: Jerry Chen
>         Attachments: Hadoop Crypto Design.pdf
>
>   Original Estimate: 504h
>  Remaining Estimate: 504h
>
>  For use cases that deal with sensitive data, we often need to encrypt data to be stored
safely at rest. Hadoop common provides a codec framework for compression algorithms. We start
here. However because encryption algorithms require some additional configuration and methods
for key management, we introduce a crypto codec framework that builds on the compression codec
framework. It cleanly distinguishes crypto algorithms from compression algorithms, but shares
common interfaces between them where possible, and also carries extended interfaces where
necessary to satisfy those needs. We also introduce a generic Key type, and supporting utility
methods and classes, as a necessary abstraction for dealing with both Java crypto keys and
PGP keys.
> The task for this feature breaks into two parts:
> 1. The crypto codec framework that based on compression codec which can be shared by
all crypto codec implementations.
> 2. The codec implementations such as AES and others.



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Mime
View raw message