[
https://issues.apache.org/jira/browse/HBASE-11446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14048530#comment-14048530
]
Andrew Purtell commented on HBASE-11446:
----------------------------------------
bq. So the random IV is made once (in the life time of a the RS) and then
onwards the IVs are predictable.
That's not how IVs work. IVs are not secret. In fact they are recorded with the
data. It is important that no key and IV combination repeat. Both the WAL key
and the initial IV are both initialized with a secure random number generator.
This is a reasonable scheme.
> Reduce the frequency of RNG calls in SecureWALCellCodec#EncryptedKvEncoder
> --------------------------------------------------------------------------
>
> Key: HBASE-11446
> URL: https://issues.apache.org/jira/browse/HBASE-11446
> Project: HBase
> Issue Type: Improvement
> Reporter: Andrew Purtell
> Assignee: Andrew Purtell
> Fix For: 0.99.0, 0.98.4
>
> Attachments: HBASE-11446.patch
>
>
> By reducing the frequency of RNG calls in
> SecureWALCellCodec#EncryptedKvEncoder we can save 37% of on CPU time in that
> method and 3% of total on CPU time during an ingest test. WAL processing is a
> critical latency sensitive area.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
