Parquet Modular Encryption (PARQUET-1178) provides an API that accepts keys, arbitrary key metadata and key retrieval callbacks - which allows to implement basically any key management policy on top of it. This Jira will add tools that implement a set of best practice elements for key management. This is not an end-to-end key management, but rather a set of components that might simplify design and development of an end-to-end solution.
This tool set is one of many possible. There is no goal to create a single or “standard” toolkit for Parquet encryption keys. Parquet has a Crypto Factory interface (PARQUET-1817) that allows to plug in different implementations of encryption key management.
|[C++] Key rotation tool||Open||Unassigned|