[HADOOP-10719] Add generateEncryptedKey and decryptEncryptedKey methods to KeyProvider

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha1
• Fix Version/s: 2.6.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Arun Suresh
• Reporter: Alejandro Abdelnur
• Created: 18/Jun/14 18:08
• Updated: 12/May/16 18:21
• Resolved: 04/Jul/14 19:41

Description

This is a follow up on HDFS-6134

KeyProvider API should have 2 new methods:

• KeyVersion generateEncryptedKey(String keyVersionName, byte[] iv)
• KeyVersion decryptEncryptedKey(String keyVersionName, byte[] iv, KeyVersion encryptedKey)

The implementation would do a known transformation on the IV (i.e.: xor with 0xff the original IV).