Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-15098

Add SM4 encryption method for HDFS

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.4.0
    • Fix Version/s: 3.4.0
    • Component/s: None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed
    • Release Note:
      New encryption codec "SM4/CTR/NoPadding" is added. Requires openssl version >=1.1.1 for native implementation.
    • Tags:
      sm4

      Description

      SM4 (formerly SMS4)is a block cipher used in the Chinese National Standard for Wireless LAN WAPI (Wired Authentication and Privacy Infrastructure).
      SM4 was a cipher proposed to for the IEEE 802.11i standard, but has so far been rejected by ISO. One of the reasons for the rejection has been opposition to the WAPI fast-track proposal by the IEEE. please see:

      https://en.wikipedia.org/wiki/SM4_(cipher)

       

      Use sm4 on hdfs as follows:
      1.Configure Hadoop KMS
      2.test HDFS sm4
      hadoop key create key1 -cipher 'SM4/CTR/NoPadding'
      hdfs dfs -mkdir /benchmarks
      hdfs crypto -createZone -keyName key1 -path /benchmarks

      requires:
      1.openssl version >=1.1.1

        Attachments

        1. HDFS-15098.001.patch
          28 kB
          liusheng
        2. HDFS-15098.002.patch
          30 kB
          zZtai
        3. HDFS-15098.003.patch
          46 kB
          zZtai
        4. HDFS-15098.004.patch
          50 kB
          zZtai
        5. HDFS-15098.005.patch
          56 kB
          zZtai
        6. HDFS-15098.006.patch
          56 kB
          zZtai
        7. HDFS-15098.007.patch
          57 kB
          liusheng
        8. HDFS-15098.008.patch
          63 kB
          zZtai
        9. image-2020-08-19-16-54-41-341.png
          17 kB
          liusheng
        10. HDFS-15098.009.patch
          83 kB
          liusheng

          Issue Links

            Activity

              People

              • Assignee:
                seanlau liusheng
                Reporter:
                seanlau liusheng
              • Votes:
                1 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 40m
                  40m