Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 55C14200BBD for ; Tue, 25 Oct 2016 03:40:00 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 52C1C160B03; Tue, 25 Oct 2016 01:40:00 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 98EC9160AEB for ; Tue, 25 Oct 2016 03:39:59 +0200 (CEST) Received: (qmail 63429 invoked by uid 500); 25 Oct 2016 01:39:58 -0000 Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@hbase.apache.org Received: (qmail 63371 invoked by uid 99); 25 Oct 2016 01:39:58 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 25 Oct 2016 01:39:58 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 855CC2C2A69 for ; Tue, 25 Oct 2016 01:39:58 +0000 (UTC) Date: Tue, 25 Oct 2016 01:39:58 +0000 (UTC) From: "Dapeng Sun (JIRA)" To: issues@hbase.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (HBASE-16463) Improve transparent table/CF encryption with Commons Crypto MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Tue, 25 Oct 2016 01:40:00 -0000 [ https://issues.apache.org/jira/browse/HBASE-16463?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dapeng Sun updated HBASE-16463: ------------------------------- Release Note: Improve transparent table/CF encryption with Commons Crypto. The change introduces a new optional CryptoCipherProvider (CommonsCryptoAES) for transparent table/CF encryption. And the encryption performance would be accelerated by hardware in modern CPU (AES-NI). This feature could be enabled by updating the configuration "hbase.crypto.cipherprovider" to "org.apache.hadoop.hbase.io.crypto.CryptoCipherProvider" in hbase-site.xml. For detailed information about transparent table/CF encryption including configuration examples see the Security section of the HBase manual. (was: Release note) > Improve transparent table/CF encryption with Commons Crypto > ----------------------------------------------------------- > > Key: HBASE-16463 > URL: https://issues.apache.org/jira/browse/HBASE-16463 > Project: HBase > Issue Type: New Feature > Components: encryption > Affects Versions: 2.0.0 > Reporter: Dapeng Sun > Assignee: Dapeng Sun > Fix For: 2.0.0 > > Attachments: HBASE-16463.001.patch, HBASE-16463.002.patch, HBASE-16463.003.patch, HBASE-16463.004.patch, HBASE-16463.004.patch, HBASE-16463.005.patch > > > Apache Commons Crypto (https://commons.apache.org/proper/commons-crypto/index.html) is a cryptographic library optimized with AES-NI. > HBASE-7544 introduces a framework for transparent encryption feature for protecting HFile and WAL data at rest. Currently JCE cipher is used bu default, the improvement will use Commons Crypto to accelerate the transparent encryption of HBase. new crypto provider with Commons CRYPTO will be provided for Transparent encryption. -- This message was sent by Atlassian JIRA (v6.3.4#6332)