[HADOOP-10693] Implementation of AES-CTR CryptoCodec using JNI to OpenSSL

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Fix Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Component/s: security
• Target Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Assignee: Yi Liu
• Reporter: Yi Liu
• Created: 13/Jun/14 08:37
• Updated: 03/Jul/14 23:40
• Resolved: 03/Jul/14 23:40

Description

In HADOOP-10603, we have an implementation of AES-CTR CryptoCodec using Java JCE provider.
To get high performance, the configured JCE provider should utilize native code and AES-NI, but in JDK6,7 the Java embedded provider doesn't support it.

Considering not all hadoop user will use the provider like Diceros or able to get signed certificate from oracle to develop a custom provider, so this JIRA will have an implementation of AES-CTR CryptoCodec using JNI to OpenSSL directly.