ggershinsky commented on PR #44043: URL: https://github.com/apache/arrow/pull/44043#issuecomment-2341436493
> > It may produces wrong AAD when reading a Parquet file created by [ParquetRewriter](https://github.com/apache/parquet-java/blob/aec7bc64dffa373db678ab2fc8b46565b4c011a5/parquet-hadoop/src/main/java/org/apache/parquet/hadoop/rewrite/ParquetRewriter.java#L90) which binpacks several encrypted files. > > Hopefully it's not possible to concatenate encrypted files together? Otherwise one can create malicious data (replay attack). Yep, merging encrypted files can be made impossible by using the AAD prefix parameter - it should keep a unique file id (provided by the writer). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
