[HADOOP-9333] Hadoop crypto codec framework based on compression codec

• Type: Sub-task
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.0.0-alpha1
• Component/s: security
• Labels: BB2015-05-TBR
• Assignee: Unassigned
• Reporter: Haifeng Chen
• Created: 25/Feb/13 03:18
• Updated: 12/May/16 18:26

Description

The work defined here is to extend the Compression Codec framework to the encryption framework for handling encryption and decryption specific requirements in Hadoop.
The targets of the encryption framework are:
1. Establishes a common abstraction of the API level that can be shared by all crypto codec implementations as well as users that use the API.
2. Provides a foundation for other components in Hadoop such as Map Reduce or HBase to support encryption features.

The design document is available in the HADOOP-9331.

Issue Links

• is depended upon by: HADOOP-9332 Crypto codec implementations for AES
• is depended upon by: HADOOP-10528 A TokenKeyProvider for a Centralized Key Manager Server (BEE: bee-key-manager)
• is related to: HDFS-6134 Transparent data at rest encryption