zookeeper-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ted Dunning <ted.dunn...@gmail.com>
Subject Re: Encryption in ZooKeeper & contrib projects
Date Thu, 23 Jun 2011 21:41:41 GMT
I think that the basic answer is no.

Encryption is used in authentication, but not in communications.  Of course,
you can do magic tunnel things to provide encryption, but ZK doesn't do it
by itself.

On Thu, Jun 23, 2011 at 2:34 PM, Melissa Mahasintunan
<stopponi@us.ibm.com>wrote:

> Sorry to repost, but hoping someone can help with this!  Thanks!
>
> Regards,
> Melissa
>
> ----- Forwarded by Melissa Mahasintunan/Silicon Valley/IBM on 06/23/2011
> 02:33 PM -----
>
> From:   Melissa Mahasintunan/Silicon Valley/IBM
> To:     user@zookeeper.apache.org
> Date:   06/17/2011 04:27 PM
> Subject:        Encryption in ZooKeeper & contrib projects
>
>
> Hi All,
>
> I am trying to determine if the ZooKeeper package (including the contrib
> packages) uses encryption, and if so, if that encryption is limited to
> such things as encryption of passwords, PINs, digital signatures, fixed
> data compression techniques or hashing.
>
> I know Zookeeper has an access control per user, so a user's password
> might be encrypted internally. However, it's not documented as far as I
> know, so I'm not sure. It may even be stored as a plain data.
>
> I've also tried to grep files in the whole package with "crypto" keyword,
> and found the related information is as follows:
>
> Related keyword:
> org.apache.zookeeper.inspector.encryption.EncryptionManager
> /BasicDataEncryptionManager   (found in contrib\ZooInspector)
> This class appears to encrypt/decrypt outside of Zookeeper, and the
> specific encrypted logic does not seem to be implemented within.
>
> Related keyword: org.apache.bookkeeper.client.MacDigestManager /
> CRC32DigestManager    (found in contrib\bookkeeper)
> This class does seem to include encryption logic, but I'm not sure if the
> functions are limited to those I've listed above.
>
> Any help would be much appreciated.  Thank you in advance!
>
> Regards,
> Melissa
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message