[PARQUET-1396] EncryptionPropertiesFactory and DecryptionPropertiesFactory

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.10.0, 1.10.1
• Fix Version/s: 1.12.0
• Component/s: parquet-mr
• Labels: pull-request-available
• Flags: Important
• External issue URL: https://issues.apache.org/jira/browse/PARQUET-1178
• External issue ID: PARQUET-1178
• Assignee: Xinli Shang
• Reporter: Xinli Shang
• Created: 20/Aug/18 17:15
• Updated: 04/Dec/21 04:04
• Resolved: 27/Jan/21 14:36

Description

This JIRA is an extension to Parquet Modular Encryption Jira(PARQUET-1178) that will provide the basic building blocks and APIs for the encryption support. 

This JIRA provides a crypto data interface for schema activation of Parquet encryption and serves as a high-level layer on top of PARQUET-1178 to make the adoption of Parquet-1178 easier, with pluggable key access module, without a need to use the low-level encryption APIs. Also, this feature will enable seamless integration with existing clients.

No change to specifications (Parquet-format), no new Parquet APIs, and no changes in existing Parquet APIs. All current applications, tests, etc, will work.

From developer perspective, they can just implement the interface into a plugin which can be attached any Parquet application like Hive/Spark etc. This decouples the complexity of dealing with KMS and schema from Parquet applications. In large organization, they may have hundreds or even thousands of Parquet applications and pipelines. The decoupling would make Parquet encryption easier to be adopted.  

From end user(for example data owner) perspective, if they think a column is sensitive, they can just set that column’s schema as sensitive and then the Parquet application just encrypt that column automatically. This makes end user easy to manage the encryptions of their columns.  

Issue Links

• Blocked: PARQUET-1325 High-level flexible and fine-grained column level access control through encryption with pluggable key access
• Blocked: SPARK-25858 Passing Field Metadata to Parquet
• Blocked: PARQUET-1397 Sample of usage Parquet-1396 and Parquet-1178 for column level encryption with pluggable key access
• is depended upon by: PARQUET-1568 High level interface to Parquet encryption
• links to: GitHub Pull Request #764
• links to: https://docs.google.com/document/d/17GTQAezl1ZC1pMNHjYU_bPVxMU6DIPjtXOiLclXUlyA/edit#heading=h.r9wntu3s8swd