[HADOOP-10734] Implement high-performance secure random number sources

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Fix Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Component/s: security
• Target Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Assignee: Yi Liu
• Reporter: Yi Liu
• Created: 22/Jun/14 09:32
• Updated: 12/Jul/14 01:29
• Resolved: 12/Jul/14 01:29

Description

This JIRA is to implement Secure random using JNI to OpenSSL, and implementation should be thread-safe.

Utilize RdRand to return random numbers from hardware random number generator. It's TRNG(True Random Number generators) having much higher performance than java.security.SecureRandom.

https://wiki.openssl.org/index.php/Random_Numbers
http://en.wikipedia.org/wiki/RdRand
https://software.intel.com/en-us/articles/performance-impact-of-intel-secure-key-on-openssl

Issue Links

• is required by: HDFS-6615 Replace java.security.SecureRandom with org.apache.hadoop.crypto.random.SecureRandom in HDFS