[CASSANDRA-6018] Add option to encrypt commitlog

• Type: New Feature
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 3.4
• Labels: commit_log encryption security
• Assignee: Jason Brown
• Reporter: Jason Brown

Authors

Jason Brown

Reviewers

Branimir Lambov

• Created: 12/Sep/13 18:16
• Updated: 16/Apr/19 09:32
• Resolved: 19/Jan/16 15:06

Description

We are going to start using cassandra for a billing system, and while I can encrypt sstables at rest (via Datastax Enterprise), commit logs are more or less plain text. Thus, an attacker would be able to easily read, for example, credit card numbers in the clear text commit log (if the calling app does not encrypt the data itself before sending it to cassandra).

I want to allow the option of encrypting the commit logs, most likely controlled by a property in the yaml.

Issue Links

• is blocked by: CASSANDRA-9945 Add transparent data encryption core classes
• is blocked by: CASSANDRA-6809 Compressed Commit Log
• is depended upon by: CASSANDRA-9633 Add ability to encrypt sstables
• links to: branch on github