[
https://issues.apache.org/jira/browse/HDDS-7733?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Duong updated HDDS-7733:
------------------------
Description:
Today, Ozone uses RSA to sign its issued tokens like block read/write tokens.
This contributes significantly to Ozone Manager latency, e.g. > 80% of key read
latency.
The absolute solution is to use symmetric keys algorithms, e.g. HmacSha256, to
sign the tokens.
This Jira is the epic story of all the efforts to design and implement token
signatures using symmetric key algorithms.
Proposal:
https://docs.google.com/document/d/1es32PId8XwDGONSRmp_NLvbSeALlf-fyXp0RJB5O3hg
was:
Today, Ozone uses RSA to sign its issued tokens like block read/write tokens.
This contributes significantly to Ozone Manager latency, e.g. > 80% of key read
latency.
The absolute solution is to use symmetric keys algorithms, e.g. HmacSha256, to
sign the tokens.
This Jira is the epic story of all the efforts to design and implement token
signatures using symmetric key algorithms.
Proposal:
https://docs.google.com/document/d/1es32PId8XwDGONSRmp_NLvbSeALlf-fyXp0RJB5O3hg/edit#
> Symmetric Key For Ozone Token Signatures
> ----------------------------------------
>
> Key: HDDS-7733
> URL: https://issues.apache.org/jira/browse/HDDS-7733
> Project: Apache Ozone
> Issue Type: New Feature
> Components: Ozone Datanode, Ozone Manager, SCM
> Reporter: Duong
> Priority: Major
>
> Today, Ozone uses RSA to sign its issued tokens like block read/write tokens.
> This contributes significantly to Ozone Manager latency, e.g. > 80% of key
> read latency.
> The absolute solution is to use symmetric keys algorithms, e.g. HmacSha256,
> to sign the tokens.
> This Jira is the epic story of all the efforts to design and implement token
> signatures using symmetric key algorithms.
> Proposal:
> https://docs.google.com/document/d/1es32PId8XwDGONSRmp_NLvbSeALlf-fyXp0RJB5O3hg
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
