ggershinsky commented on PR #259: URL: https://github.com/apache/parquet-format/pull/259#issuecomment-2152299499
> By the way, would this issue be alleviated if column keys were always derived from the footer key? What is the use case for not using dedicated column keys? Thats the main of point of column encryption - to enable access control of sensitive columns. In this usecase, a user with access to the footer key should not be able to derive the column key. There is a usecase where this might be done - when the goal is to exceed the 2 billion page limit in a file with flat/uniform encryption (without supporting column access control). Then say each column key is derived from the footer key, and the limit becomes N x 2 billion (where N is the number of columns). But this is niche; and can be done already today. This spec explicitly leaves key management out of scope, as it will quickly go down a rabbit hole. As discussed above, we'll mention the invocation limit; the users will figure out the implications. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
