Mailing-List: contact user-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@hbase.apache.org
Received-SPF: pass (nike.apache.org: domain of mohandes.zebeleh.67@gmail.com
 designates 209.85.214.169 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAN1suNP+5tDzMju92YwMRdAD8XuJ9P+LVMLVKjBAoUzMs-99hw@mail.gmail.com>
References: 
 <CAJdcUW27WoKweTkvWEu6aSXGSPwkQCFjMWBNNX6v01DT5omfMg@mail.gmail.com>
	<CAJdcUW3cubc_VUG_MNtZ33sFUHRvcnYurXTwLko4xcoJDmAJoA@mail.gmail.com>
	<CAN1suNP+5tDzMju92YwMRdAD8XuJ9P+LVMLVKjBAoUzMs-99hw@mail.gmail.com>
Date: Thu, 6 Sep 2012 10:01:25 +0430
Message-ID: 
 <CAJdcUW32XjShYYJ0Fv3NE=4VPZmV99kcbr7XHJdg=QX4sPjvCw@mail.gmail.com>
Subject: Re: why hbase doesn't provide Encryption
From: Farrokh Shahriari <mohandes.zebeleh.67@gmail.com>
To: Julian Wissmann <julian.wissmann@sdace.de>
Cc: user@hbase.apache.org
Content-Type: multipart/alternative; boundary=e89a8f646e2b6b0f4604c901cd1b

--e89a8f646e2b6b0f4604c901cd1b
Content-Type: text/plain; charset=ISO-8859-1

Hi there
I want encryption before pushing data into hbase,and I've done it by
changing in some library to encrypt data.But it doesn't have any
performance,I mean for each row it should encrypt/decrypt the cell,so for a
query that has a lot of rows ,it will take a long time.
my question is this,why hbase doesn't have any option for that ( in hbase
shell like compression method ),for example like other relational
databases(sqlserver,.. ),is there any reason for that ?
 Thanks you guys


On Thu, Sep 6, 2012 at 2:23 AM, Julian Wissmann <julian.wissmann@sdace.de>wrote:

> What problem are you trying to solve? Do you want encryption between
> server and client, between servers or encryption of data within Hbase? You
> need to be more specific.
>
> If one of the first two is what you want: This kind of stuff can easily be
> achieved with stunnel or OpenVPN and can probably be considered a very
> esoteric requirement, as there are probably not many Hbase users out there,
> who have a cluster running across machines that are exposed to open
> networks.
> If you are looking for the latter, imo the correct way to do it would be
> encrypting data _before_ pushing it into the database. Java actually
> provides an excellent crypto framework for doing such things.
>
>
> 2012/9/5 Farrokh Shahriari <mohandes.zebeleh.67@gmail.com>
>
>> Hello
>> I just wanna know why hbase doesn't provide Encryption ?
>>
>> Tnx
>>
>
>

--e89a8f646e2b6b0f4604c901cd1b--