[RANGER-3641] Add API to enhance KMS capabilities

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.0.0, 2.3.0
• Component/s: kms
• Assignee: Unassigned
• Reporter: kirby zhou
• Created: 24/Feb/22 11:04
• Updated: 29/Mar/23 10:30

Description

Some APIs are very useful.

 

• GenerateEEK with decrypted EEK returned together

Like:

{EEK, EK}

= GenerateEEK2(KeyVersion)

This helps Program which request a EEK to encrypt something itself such like KUDU or MySQL.

It now takes 2 RPC calls to complete encryption. If a API can return EEK and EK together, we can save 1 RPC call.

 

• Simple Encryption and Decryption API

Like:

{EncryptedData}

= Encrypt(KeyVersion, PlainData)

{PlainData}

= Decrypt(KeyVersion, EncryptedData)

This helps Ranger KMS works for some simple situation such as encrypting password.