[KUDU-611] Cryptographically sign the operation timestamps returned on server responses.

• Type: Sub-task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: M4.5
• Component/s: security, tserver
• Target Version/s: Backlog
• Assignee: Unassigned
• Reporter: David Alves
• Created: 06/Feb/15 02:35
• Updated: 14/Oct/16 21:44

Description

We return operation timestamps along with the responses for operations which are serialized by the tablet server. In certain cases those timestamps are forwarded to other servers and will possibly update their clocks.

A malicious client could choose a bad timestamp and move all the server's clocks to the future.

Crypto signing the timestamp will allow t make sure that the timestamp originated from another server.

Issue Links

• relates to: KUDU-1661 Mark kudu::client::KuduClient::GetLatestObservedTimestamp() as experimental