[
https://issues.apache.org/jira/browse/CASSANDRA-9945?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14650194#comment-14650194
]
Robert Stupp commented on CASSANDRA-9945:
-----------------------------------------
+1, except one thing: Change the absolute pathname in
{{EncryptionContextGenerator.createEncryptionOptions()}} (forgot to mention
that in the initial round, sorry). Feel free to it on commit.
WRT bouncycastle - 10x slower is convincing enough for me ;)
WRT changing the key during runtime. Changing the key during a planned
rolling-restart is probably good enough. If there's demand for it, we can
re-visit this later in a separate ticket, of course. I agree, let's keep is
simple.
> Add transparent data encryption core classes
> --------------------------------------------
>
> Key: CASSANDRA-9945
> URL: https://issues.apache.org/jira/browse/CASSANDRA-9945
> Project: Cassandra
> Issue Type: Improvement
> Reporter: Jason Brown
> Assignee: Jason Brown
> Labels: encryption
> Fix For: 3.0 beta 1
>
>
> This patch will add the core infrastructure classes necessary for transparent
> data encryption (file-level encryption), as required for CASSANDRA-6018 and
> CASSANDRA-9633. The phrase "transparent data encryption", while not the most
> aesthetically pleasing, seems to be used throughout the database industry
> (Oracle, SQLQServer, Datastax Enterprise) to describe file level encryption,
> so we'll go with that, as well.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
