[HADOOP-10967] Improve DefaultCryptoExtension#generateEncryptedKey performance

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.6.0
• Component/s: security
• Target Version/s: 2.6.0
• Hadoop Flags: Reviewed
• Assignee: Yi Liu
• Reporter: Yi Liu
• Created: 13/Aug/14 12:45
• Updated: 01/Dec/14 03:07
• Resolved: 15/Aug/14 05:45

Description

This JIRA is to improve generateEncryptedKey performance:

1. SecureRandom#generateSeed is very slow, we should use SecureRandom#nextBytes to generate the IV which is much faster.

2. Define SecureRandom as threadlocal object which can improve the performance a bit.

3. Use new SecureRandom() instead of SHA1PRNG, the former has better entropy.