Description
There are some cases where users want encryption at rest for the walogs. It should be fairly trivial to implement it in such a way to insert a CipherOutputStream into the data path (defaulting to using a NullCipher) and then making the Cipher pluggable to users can insert the appropriate mechanisms for their use case.
This also means swapping in CipherInputStream and putting in a check to make sure the Cipher type's match at read and write time. Possibly a versioning mechanism so people can migrate Ciphers.
Attachments
Attachments
Issue Links
- Is contained by
-
ACCUMULO-998 support encryption at rest
- Resolved
- is related to
-
ACCUMULO-1032 encryption changes break diagnostic LogReader
- Resolved
-
ACCUMULO-1216 reconsider using SequenceFiles for the WAL
- Open