[
https://issues.apache.org/jira/browse/HADOOP-9331?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13620523#comment-13620523
]
Jerry Chen commented on HADOOP-9331:
------------------------------------
{quote}Can you give a example how to config this feature?{quote}
1. For crypto codec, it is identical to the usage of compression codec and no
general configuration needed in API level. Please refer to “2.3 Use Cases” for
API usage examples in design document attached in this JIRA. Just the same as
compression codec, codec implementation may have its own configurations.
Please refer the “3.3 User Case” for usage example of AESCodec.
2. For MapReduce job to use crypto codec, including the configurations that
needed for compression codec, we need further configurations for providing the
keys. The section “4 MapReduce Key Management” of the design document has a
detailed description of configurations and please refer the “4.6 Use Cases” for
usage examples for this part.
> Hadoop crypto codec framework and crypto codec implementations
> --------------------------------------------------------------
>
> Key: HADOOP-9331
> URL: https://issues.apache.org/jira/browse/HADOOP-9331
> Project: Hadoop Common
> Issue Type: New Feature
> Components: security
> Affects Versions: 3.0.0
> Reporter: Jerry Chen
> Attachments: Hadoop Crypto Design.pdf
>
> Original Estimate: 504h
> Remaining Estimate: 504h
>
> For use cases that deal with sensitive data, we often need to encrypt data to
> be stored safely at rest. Hadoop common provides a codec framework for
> compression algorithms. We start here. However because encryption algorithms
> require some additional configuration and methods for key management, we
> introduce a crypto codec framework that builds on the compression codec
> framework. It cleanly distinguishes crypto algorithms from compression
> algorithms, but shares common interfaces between them where possible, and
> also carries extended interfaces where necessary to satisfy those needs. We
> also introduce a generic Key type, and supporting utility methods and
> classes, as a necessary abstraction for dealing with both Java crypto keys
> and PGP keys.
> The task for this feature breaks into two parts:
> 1. The crypto codec framework that based on compression codec which can be
> shared by all crypto codec implementations.
> 2. The codec implementations such as AES and others.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
