[PARQUET-1373] Encryption key management tools

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Done
• Affects Version/s: 1.12.0
• Fix Version/s: 1.12.0
• Component/s: parquet-mr
• External issue ID: PARQUET-1178
• Assignee: Gidon Gershinsky
• Reporter: Gidon Gershinsky
• Created: 08/Aug/18 07:35
• Updated: 24/Sep/20 06:14
• Resolved: 13/Jul/20 05:46

Description

Parquet Modular Encryption (PARQUET-1178) provides an API that accepts keys, arbitrary key metadata and key retrieval callbacks - which allows to implement basically any key management policy on top of it. This Jira will add tools that implement a set of best practice elements for key management. This is not an end-to-end key management, but rather a set of components that might simplify design and development of an end-to-end solution.

This tool set is one of many possible. There is no goal to create a single or “standard” toolkit for Parquet encryption keys. Parquet has a Crypto Factory interface (PARQUET-1817) that allows to plug in different implementations of encryption key management.

Issue Links

• depends upon: PARQUET-1178 Parquet modular encryption
• is depended upon by: PARQUET-1568 High level interface to Parquet encryption
• is depended upon by: PARQUET-1854 Properties-Driven Interface to Parquet Encryption
• links to: Design doc

Sub-Tasks

• [C++] Encryption key management: Resolved
• Double wrapped key manager: Resolved
• Key rotation tool: Resolved
• [C++] Key rotation tool: Open