Xiao Chen updated HDFS-10899:
    Attachment: Re-encrypt edek design doc.pdf

Attaching a design doc. Many thanks to [~andrew.wang] for the offline reviews!

> Add functionality to re-encrypt EDEKs.
> --------------------------------------
>                 Key: HDFS-10899
>                 URL: https://issues.apache.org/jira/browse/HDFS-10899
>             Project: Hadoop HDFS
>          Issue Type: New Feature
>          Components: encryption, kms
>            Reporter: Xiao Chen
>            Assignee: Xiao Chen
>         Attachments: Re-encrypt edek design doc.pdf
> Currently when an encryption zone (EZ) key is rotated, it only takes effect 
> on new EDEKs. We should provide a util to re-encrypt EDEKs after the EZ key 
> rotation, for improved security.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org

Reply via email to