luke-kucing opened a new issue, #3470:
URL: https://github.com/apache/iceberg-rust/issues/3470
### Is your feature request related to a problem or challenge?
`crates/iceberg` enables Parquet's `encryption` feature unconditionally:
```toml
parquet = { workspace = true, features = ["async", "encryption"] }
```
Parquet's modular encryption brings in `ring`. Downstream users who must
restrict their cryptography therefore can't build iceberg without `ring`, even
if they never read or write encrypted tables. This matters, for example, for
deployments limited to a FIPS-validated module such as aws-lc-rs.
### Describe the solution you'd like
Put Parquet encryption behind an `encryption` cargo feature of `iceberg`. It
can stay enabled by default so that today's behaviour is unchanged.
Code that handles encryption keys or encrypted files would compile only with
the feature. Without it, iceberg could return a clear error when a table needs
decryption.
### Willingness to contribute
Happy to test a change; we currently refuse encrypted tables in our own code
so the `ring` path never runs.
---
AI disclosure: drafted with an AI coding assistant; reviewed by me.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
