[
https://issues.apache.org/jira/browse/HDFS-10899?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15631811#comment-15631811
]
Xiao Chen edited comment on HDFS-10899 at 11/3/16 6:05 PM:
-----------------------------------------------------------
WIP patch attached. The re-encrypt is functional, and all test cases from the
doc added. Appreciate any early feedback, thanks in advance!
Work on going:
- Cancel re-encrypt
- Check re-encrypt progress
- Support client to verify that files are re-encrypted
- Perf testing and related tuning (including updating EZM to unlock when
calling {{reencryptEncrytedKey}} - and maybe batching that)
was (Author: xiaochen):
WIP patch attached. The re-encrypt is functional, and all test cases from the
doc added. Appreciate any early feedback, thanks in advance!
Work on going:
- Cancel re-encrypt
- Check re-encrypt progress
- Support client to verify that files are re-encrypted
- Perf testing and related tuning.
> Add functionality to re-encrypt EDEKs.
> --------------------------------------
>
> Key: HDFS-10899
> URL: https://issues.apache.org/jira/browse/HDFS-10899
> Project: Hadoop HDFS
> Issue Type: New Feature
> Components: encryption, kms
> Reporter: Xiao Chen
> Assignee: Xiao Chen
> Attachments: HDFS-10899.wip.patch, Re-encrypt edek design doc.pdf
>
>
> Currently when an encryption zone (EZ) key is rotated, it only takes effect
> on new EDEKs. We should provide a way to re-encrypt EDEKs after the EZ key
> rotation, for improved security.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
