[HADOOP-11096] KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.6.0
• Component/s: security
• Target Version/s: 2.6.0
• Hadoop Flags: Reviewed
• Assignee: Alejandro Abdelnur
• Reporter: Alejandro Abdelnur
• Created: 16/Sep/14 20:17
• Updated: 01/Dec/14 03:08
• Resolved: 17/Sep/14 06:22

Description

when decrypting a EEK the KeyAuthorizationKeyProvider must verify the keyversionname belongs to the keyname.

Issue Links

• is blocked by: HDFS-7006 Test encryption zones with KMS