[CASSANDRA-14102] Vault support for transparent data encryption

• Type: New Feature
• Status: Patch Available
• Priority: Normal
• Resolution: Unresolved
• Fix Version/s: 5.x
• Component/s: Legacy/Core
• Labels: encryption security
• Assignee: Unassigned
• Reporter: Stefan Podkowinski
• Created: 08/Dec/17 12:46
• Updated: 07/Mar/23 10:53

Description

Transparent data encryption provided by CASSANDRA-9945 can currently be used for commitlog and hints. The default KeyProvider implementation that we ship allows to use a local keystore for storing and retrieving keys. Thanks to the pluggable handling of the KeyStore provider and basic Vault related classes introduced in CASSANDRA-13971, a Vault based implementation can be provided as KeyProvider as well.

Issue Links

• depends upon: CASSANDRA-13971 Automatic certificate management using Vault
• is depended upon by: CASSANDRA-14107 Dynamic key rotation support for transparent data encryption