Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-16463

Improve transparent table/CF encryption with Commons Crypto

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.0.0
    • 2.0.0
    • encryption
    • None
    • Reviewed
    • Hide
      Improve transparent table/CF encryption with Commons Crypto. The change introduces a new optional CryptoCipherProvider (CommonsCryptoAES) for transparent table/CF encryption. And the encryption performance would be accelerated by hardware in modern CPU (AES-NI). This feature could be enabled by updating the configuration "hbase.crypto.cipherprovider" to "org.apache.hadoop.hbase.io.crypto.CryptoCipherProvider" in hbase-site.xml. For detailed information about transparent table/CF encryption including configuration examples see the Security section of the HBase manual.
      Show
      Improve transparent table/CF encryption with Commons Crypto. The change introduces a new optional CryptoCipherProvider (CommonsCryptoAES) for transparent table/CF encryption. And the encryption performance would be accelerated by hardware in modern CPU (AES-NI). This feature could be enabled by updating the configuration "hbase.crypto.cipherprovider" to "org.apache.hadoop.hbase.io.crypto.CryptoCipherProvider" in hbase-site.xml. For detailed information about transparent table/CF encryption including configuration examples see the Security section of the HBase manual.

    Description

      Apache Commons Crypto (https://commons.apache.org/proper/commons-crypto/index.html) is a cryptographic library optimized with AES-NI.
      HBASE-7544 introduces a framework for transparent encryption feature for protecting HFile and WAL data at rest. Currently JCE cipher is used bu default, the improvement will use Commons Crypto to accelerate the transparent encryption of HBase. new crypto provider with Commons CRYPTO will be provided for Transparent encryption.

      Attachments

        1. HBASE-16463.005.patch
          27 kB
          Dapeng Sun
        2. HBASE-16463.004.patch
          28 kB
          Dapeng Sun
        3. HBASE-16463.004.patch
          28 kB
          Dapeng Sun
        4. HBASE-16463.003.patch
          26 kB
          Dapeng Sun
        5. HBASE-16463.002.patch
          16 kB
          Dapeng Sun
        6. HBASE-16463.001.patch
          15 kB
          Dapeng Sun

        Issue Links

          Activity

            People

              dapengsun Dapeng Sun
              dapengsun Dapeng Sun
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: