[MAPREDUCE-4550] Key Protection : Define Encryption and Key Protection interfaces and default implementations

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Component/s: security
• Assignee: Benoy Antony
• Reporter: Benoy Antony
• Created: 13/Aug/12 16:36
• Updated: 16/Oct/17 19:41
• Resolved: 16/Oct/17 19:41

Description

A secret key is read from a Key Store and then encrypted during transport between JobClient and Task. The tasktrackers/nodemanagers decrypt the secrets and provide the secrets to child tasks which part of the job.

This jira defines the interfaces to accomplish the above :

1) KeyProvider - to read keys from a KeyStore

2) Encrypter and Decrypter - to and encrypt and decrypt secrets/data.

The default/dummy implementations will also be added. This includes a KeyProvider implementation to read keys from a Java KeyStore.