[GitHub] ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM mode for crypto

2017-11-15 Thread GitBox
ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM 
mode for crypto
URL: https://github.com/apache/accumulo/pull/322#discussion_r151221757
 
 

 ##
 File path: core/src/test/resources/crypto-on-accumulo-site.xml
 ##
 @@ -76,8 +76,12 @@
   
org.apache.accumulo.core.security.crypto.DefaultCryptoModule
 
 
+  crypto.security.provider
+  SunJCE
 
 Review comment:
   Does this test actually need SunJCE, specifically?


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM mode for crypto

2017-11-15 Thread GitBox
ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM 
mode for crypto
URL: https://github.com/apache/accumulo/pull/322#discussion_r151213972
 
 

 ##
 File path: 
core/src/main/java/org/apache/accumulo/core/security/crypto/CryptoModuleParameters.java
 ##
 @@ -570,6 +570,52 @@ public void setBlockStreamSize(int blockStreamSize) {
   }
 
   /**
+   * Returns the mode from the cipher suite. Assumes the suite is in the form 
of algorithm/mode/padding, returns null if the cipher suite is malformed or
+   * NullCipher.
+   *
+   * @return the encryption mode from the cipher suite
+   */
+  public String getCipherSuiteEncryptionMode() {
+String[] parts = this.cipherSuite.split("/");
+if (parts.length == 3) {
+  return parts[1];
+} else {
+  return null;
+}
+  }
+
+  /**
+   * Updates the initialization vector for use when the encryption mode is 
GCM. If the IV is not currently null, and the encryption mode is GCM, it will
+   * increment the IV instead of letting the CryptoModule decide what to do.
+   */
+  public void updateInitializationVector() {
+if (this.initializationVector != null && 
getCipherSuiteEncryptionMode().equals(DefaultCryptoModule.ALGORITHM_PARAMETER_SPEC_GCM))
 {
+  incrementIV(this.initializationVector, this.initializationVector.length 
- 1);
+} else {
+  this.initializationVector = null;
+}
+  }
+
+  /**
+   * Because IVs can be longer than longs, this increments arbitrarily sized 
byte arrays by 1, with a roll over to 0 after the max value is reached.
+   *
+   * @param iv
+   *  The iv to be incremented
+   * @param i
+   *  The current byte being incremented
+   */
+  private static void incrementIV(byte[] iv, int i) {
 
 Review comment:
   This implementation looks correct to me, but I think it should have its own 
unit test, to be sure, and to prevent regressions. I think testing all the 
boundary cases for arrays of length 1, 2, and 3, would be sufficient to cover 
all possible cases. (`i == 0, i == a.len-1, and 0 < i < a.len-1`)


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM mode for crypto

2017-11-15 Thread GitBox
ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM 
mode for crypto
URL: https://github.com/apache/accumulo/pull/322#discussion_r151218364
 
 

 ##
 File path: 
core/src/main/java/org/apache/accumulo/core/security/crypto/CryptoModuleParameters.java
 ##
 @@ -570,6 +570,52 @@ public void setBlockStreamSize(int blockStreamSize) {
   }
 
   /**
+   * Returns the mode from the cipher suite. Assumes the suite is in the form 
of algorithm/mode/padding, returns null if the cipher suite is malformed or
+   * NullCipher.
+   *
+   * @return the encryption mode from the cipher suite
+   */
+  public String getCipherSuiteEncryptionMode() {
+String[] parts = this.cipherSuite.split("/");
+if (parts.length == 3) {
+  return parts[1];
+} else {
+  return null;
+}
+  }
+
+  /**
+   * Updates the initialization vector for use when the encryption mode is 
GCM. If the IV is not currently null, and the encryption mode is GCM, it will
+   * increment the IV instead of letting the CryptoModule decide what to do.
+   */
+  public void updateInitializationVector() {
+if (this.initializationVector != null && 
getCipherSuiteEncryptionMode().equals(DefaultCryptoModule.ALGORITHM_PARAMETER_SPEC_GCM))
 {
+  incrementIV(this.initializationVector, this.initializationVector.length 
- 1);
 
 Review comment:
   Are there other modes where it makes sense to increment the IV instead of 
deferring to the CryptoModule? Can we move all the logic around IV decisions to 
one place (either here, or the CryptoModule)?
   
   (Keep in mind, the crypto package where the CryptoModule and 
DefaultCryptoModule are located is not public API; it's intended to only be 
used internally, so it can be changed based on our needs.)


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM mode for crypto

2017-11-15 Thread GitBox
ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM 
mode for crypto
URL: https://github.com/apache/accumulo/pull/322#discussion_r151210587
 
 

 ##
 File path: 
core/src/main/java/org/apache/accumulo/core/file/rfile/bcfile/BCFile.java
 ##
 @@ -160,9 +160,12 @@ public WBlockState(Algorithm compressionAlgo, 
PositionedDataOutputStream fsOut,
 // *This* is also very important. We don't want the underlying stream 
messed with.
 cryptoParams.setRecordParametersToStream(false);
 
-// It is also important to make sure we get a new initialization 
vector on every call in here,
-// so set any existing one to null, in case we're reusing a parameters 
object for its RNG or other bits
-cryptoParams.setInitializationVector(null);
+// It is also important to make sure we get a new initialization 
vector on every call in here.
+// This was originally done by setting any existing one to null, in 
case we were reusing a parameters object.
+// We are also now keeping track of the IV across the use of a 
specific file key, because if the encryption
+// mode is GCM, it's important to guarantee unique IVs. The 
updateInitializationVector will increment the vector if it
+// already exists for GCM, or it will set the IV to null in other 
cases.
+cryptoParams.updateInitializationVector();
 
 Review comment:
   The embedded comments probably do not need to explain the previous behavior 
which no longer applies. They can be simplified to explain the current 
requirements and behavior.


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM mode for crypto

2017-11-15 Thread GitBox
ctubbsii commented on a change in pull request #322: ACCUMULO-4740 Enable GCM 
mode for crypto
URL: https://github.com/apache/accumulo/pull/322#discussion_r151212576
 
 

 ##
 File path: 
core/src/main/java/org/apache/accumulo/core/security/crypto/CryptoModuleParameters.java
 ##
 @@ -570,6 +570,52 @@ public void setBlockStreamSize(int blockStreamSize) {
   }
 
   /**
+   * Returns the mode from the cipher suite. Assumes the suite is in the form 
of algorithm/mode/padding, returns null if the cipher suite is malformed or
+   * NullCipher.
+   *
+   * @return the encryption mode from the cipher suite
+   */
+  public String getCipherSuiteEncryptionMode() {
+String[] parts = this.cipherSuite.split("/");
+if (parts.length == 3) {
 
 Review comment:
   According to 
https://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html,
 sometimes the mode, like CCM or GCM are used as the "Algorithm Name". Are 
those expected to be returned here as the mode?
   
   Since only the mode is being extracted here, are we assuming AES is the 
algorithm here? or is that extracted elsewhere?
   
   Could one reasonably conclude that the syntax "AES/CBC" means "NoPadding"? 
Should this method handle the case where parts.length == 2, with the assumption 
that "NoPadding" is implied?


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] jkrdev commented on issue #320: ACCUMULO-4730 Created EntryLengthSummarizer

2017-11-15 Thread GitBox
jkrdev commented on issue #320: ACCUMULO-4730 Created EntryLengthSummarizer
URL: https://github.com/apache/accumulo/pull/320#issuecomment-344688212
 
 
   I would like to be added to the people page the info I want is just my name 
Jared R. Thanks.


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] mikewalch closed pull request #40: Updated people page

2017-11-15 Thread GitBox
mikewalch closed pull request #40: Updated people page
URL: https://github.com/apache/accumulo-website/pull/40
 
 
   

This is a PR merged from a forked repository.
As GitHub hides the original diff on merge, it is displayed below for
the sake of provenance:

As this is a foreign pull request (from a fork), the diff is supplied
below (as it won't show otherwise due to GitHub magic):

diff --git a/pages/people.md b/pages/people.md
index 6a0ad45..e00a0e0 100644
--- a/pages/people.md
+++ b/pages/people.md
@@ -7,140 +7,133 @@ permalink: /people/
 ## PMC and Committers
 
 {: .table .table-striped}
-| username  | name  | organization   | 
timezone |
-|---|---||--|
-| acordova  | Aaron Cordova | [Koverse][KOVERSE] | 
 |
-| afuchs| Adam Fuchs| [sqrrl][SQRRL] | 
[ET][ET] |
-| bhavanki  | Bill Havanki  | [Cloudera][CLOUDERA]   | 
[ET][ET] |
-| billie| Billie Rinaldi| [Hortonworks][HORTONWORKS] | 
[ET][ET] |
-| bimargulies   | Benson Margulies  | [Basis Technology Corp.][BASISTECH]| 
[ET][ET] |
-| brianloss | Brian Loss| [Praxis Engineering][PRAXIS]   | 
[ET][ET] |
-| busbey| Sean Busbey   | [Cloudera][CLOUDERA]   | 
[CT][CT] |
-| cawaring  | Chris Waring  || 
 |
-| cjnolet   | Corey J. Nolet| [Tetra Concepts LLC][TETRA]| 
[ET][ET] |
-| ctubbsii  | Christopher Tubbs | [NSA][NSA] | 
[ET][ET] |
-| dhutchis  | Dylan Hutchison   | [University of Washington][UW] | 
[PT][PT] |
-| dlmarion  | Dave Marion   | [Arctic Slope Regional Corp.][ASRC]| 
[ET][ET] |
-| drew  | Drew Farris   | [Booz Allen Hamilton][BOOZ]| 
[ET][ET] |
-| ecn   | Eric Newton   | [SW Complete Inc.][SWC]| 
[ET][ET] |
-| elserj| Josh Elser| [Hortonworks][HORTONWORKS] | 
[ET][ET] |
-| etcoleman | Ed Coleman|| 
[ET][ET] |
-| jtrost| Jason Trost   | [Endgame][ENDGAME] | 
 |
-| ibella| Ivan Bella| [Arctic Slope Regional Corp.][ASRC]| 
[ET][ET] |
-| kturner   | Keith Turner  | [Peterson Technologies][PETERSON]  | 
[ET][ET] |
-| mdrob | Mike Drob | [Cloudera][CLOUDERA]   | 
[ET][ET] |
-| medined   | David Medinets|| 
 |
-| mjwall| Michael Wall  | [Arctic Slope Regional Corp.][ASRC]| 
[ET][ET] |
-| mmiller   | Michael Miller| [Centroid, LLC][CENTROID]  | 
[ET][ET] |
-| mwalch| Mike Walch| [Peterson Technologies][PETERSON]  | 
[ET][ET] |
-| phrocker  | Marc Parisi   | [Hortonworks][HORTONWORKS] | 
[ET][ET] |
-| rweeks| Russ Weeks| [PHEMI][PHEMI] | 
[PT][PT] |
-| shickey   | Sean Hickey   || 
[PT][PT] |
-| ujustgotbilld | William Slacum| [Miner  Kasch][MINERKASCH]| 
[ET][ET] |
-| vikrams   | Vikram Srivastava | [Cloudera][CLOUDERA]   | 
[PT][PT] |
-| vines | John Vines| [sqrrl][SQRRL] | 
[ET][ET] |
+| apache id | name  | 
organization   | timezone |
+|---|---||--|
+| acordova  | Aaron Cordova | 
[Koverse][KOVERSE] |  |
+| afuchs| Adam Fuchs| 
[sqrrl][SQRRL] | [ET][ET] |
+| bhavanki  | Bill Havanki  | 
[Cloudera][CLOUDERA]   | [ET][ET] |
+| billie| Billie Rinaldi| 
[Hortonworks][HORTONWORKS] | [ET][ET] |
+| bimargulies   | Benson Margulies  | [Basis 
Technology Corp.][BASISTECH]| [ET][ET] |
+| brianloss | Brian Loss| [Praxis 
Engineering][PRAXIS]   | [ET][ET] |
+| busbey| Sean Busbey   | 
[Cloudera][CLOUDERA]   | [CT][CT] |
+| cawaring  | Chris Waring  |  
  |  |
+| cjnolet   | Corey J. Nolet| [Tetra 
Concepts LLC][TETRA]| [ET][ET] |
+| ctubbsii  | [Christopher Tubbs](https://github.com/ctubbsii)  | 
[NSA][NSA]   

[GitHub] mikewalch opened a new pull request #40: Updated people page

2017-11-15 Thread GitBox
mikewalch opened a new pull request #40: Updated people page
URL: https://github.com/apache/accumulo-website/pull/40
 
 
   * Removed username for contributors
   * Changed username column in committers to apache id
   * Names can now link to GitHub profile
   * Removed Orgs
   * Added link to GitHub contributor list


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] mikewalch closed pull request #39: Added PircDef to people.md and updated release notes.

2017-11-15 Thread GitBox
mikewalch closed pull request #39: Added PircDef to people.md and updated 
release notes.
URL: https://github.com/apache/accumulo-website/pull/39
 
 
   

This is a PR merged from a forked repository.
As GitHub hides the original diff on merge, it is displayed below for
the sake of provenance:

As this is a foreign pull request (from a fork), the diff is supplied
below (as it won't show otherwise due to GitHub magic):

diff --git a/_posts/release/2017-09-05-accumulo-2.0.0.md 
b/_posts/release/2017-09-05-accumulo-2.0.0.md
index 12dcc74..210e24a 100644
--- a/_posts/release/2017-09-05-accumulo-2.0.0.md
+++ b/_posts/release/2017-09-05-accumulo-2.0.0.md
@@ -18,6 +18,16 @@ always return `false` instead of `true`, even if the 
contents are equal.
 [ACCUMULO-3652] - Replaced string concatenation in log statements with slf4j
 where applicable. Removed tserver TLevel logging class.
 
+[ACCUMULO-4733] - Introduced a new configuration option,
+crypto.security.provider, to allow for a configurable security provider for
+crypto. If unset, it will default to the system level Provider list.
+
+[ACCUMULO-4737] - Renamed configuration option crypto.cipher.algorithm.name to
+crypto.cipher.key.algorithm.name. The option now functions as described in
+the user manual. Introduced a new configuration option, 
crypto.wal.cipher.suite,
+to allow for a separate configuration for WAL files. If unset, this will
+default to the value for crypto.cipher.suite.
+
 ## Upgrading
 
 ## Testing
@@ -25,3 +35,5 @@ where applicable. Removed tserver TLevel logging class.
 
 [ACCUMULO-3652]: https://issues.apache.org/jira/browse/ACCUMULO-3652
 [ACCUMULO-4726]: https://issues.apache.org/jira/browse/ACCUMULO-4726
+[ACCUMULO-4733]: https://issues.apache.org/jira/browse/ACCUMULO-4733
+[ACCUMULO-4737]: https://issues.apache.org/jira/browse/ACCUMULO-4737
diff --git a/pages/people.md b/pages/people.md
index 6e6f0df..6a0ad45 100644
--- a/pages/people.md
+++ b/pages/people.md
@@ -103,6 +103,7 @@ permalink: /people/
 | | Mike Fagan  | [Arcus Research][ARCUS]  
 | [MT][MT]  |
 | | Morgan Haskel   |  
 |   |
 | | Nguessan Kouame |  
 |   |
+| PircDef | Nick Felts  | [Praxis Engineering][PRAXIS] 
 | [ET][ET]  |
 | | Oren Falkowitz  | [sqrrl][SQRRL]   
 | [ET][ET]  |
 | | Phil Eberhardt  | [sqrrl][SQRRL]   
 | [ET][ET]  |
 | | Philip Young|  
 |   |


 


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] keith-turner commented on a change in pull request #39: Added PircDef to people.md and updated release notes.

2017-11-15 Thread GitBox
keith-turner commented on a change in pull request #39: Added PircDef to 
people.md and updated release notes.
URL: https://github.com/apache/accumulo-website/pull/39#discussion_r151165086
 
 

 ##
 File path: _posts/release/2017-09-05-accumulo-2.0.0.md
 ##
 @@ -18,10 +18,22 @@ always return `false` instead of `true`, even if the 
contents are equal.
 [ACCUMULO-3652] - Replaced string concatenation in log statements with slf4j
 where applicable. Removed tserver TLevel logging class.
 
+[ACCUMULO-4733] - Introduced a new configuration option,
+crypto.security.provider, to allow for a configurable security provider for
+crypto. If unset, it will default to the system level Provider list.
+
+[ACCUMULO-4737] - Renamed configuration option crypto.cipher.algorithm.name to
+crypto.cipher.key.algorithm.name. The option now functions as described in
+Property.java. Introduced a new configuration option, crypto.wal.cipher.suite,
 
 Review comment:
   The documentation in Property.java will eventually end up in the user 
manual.  So could say as described in the user manual.  Also should be able to 
link to it eventually.


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] mikewalch closed pull request #37: ACCUMULO-4714 Create landing page for new developers

2017-11-15 Thread GitBox
mikewalch closed pull request #37: ACCUMULO-4714 Create landing page for new 
developers
URL: https://github.com/apache/accumulo-website/pull/37
 
 
   

This is a PR merged from a forked repository.
As GitHub hides the original diff on merge, it is displayed below for
the sake of provenance:

As this is a foreign pull request (from a fork), the diff is supplied
below (as it won't show otherwise due to GitHub magic):

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 000..675198c
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,32 @@
+
+
+# Contributing to the Accumulo Website
+
+Contributions to the website can be made by creating pull requests to this 
repo on GitHub.
+
+Before creating a pull request, follow the instructions in the [README.md] to 
test
+your changes by running the website locally.
+
+If you cannot run the website locally, it's OK to submit your pull request. A 
committer
+will test your changes before merging.
+
+For general information on contributing to Accumulo projects, check out the
+[How To Contribute][contribute] page.
+
+[README.md]: README.md
+[contribute]: https://accumulo.apache.org/how-to-contribute/
diff --git a/_includes/nav.html b/_includes/nav.html
index 295d2e6..f7891cf 100644
--- a/_includes/nav.html
+++ b/_includes/nav.html
@@ -24,6 +24,7 @@
 
   Documentation
   
+Quickstart 
(1.x)
 User Manual ({{ site.latest_minor_release 
}})
 Javadocs ({{ site.latest_minor_release }})
 Examples ({{ site.latest_minor_release }})
@@ -36,11 +37,10 @@
 
   Community
   
-Get Involved
-Mailing 
Lists
+Contact Us
+How To 
Contribute
 People
 Related 
Projects
-Contributor 
Guide
   
 
   
diff --git a/contributor/contributors-guide.md 
b/contributor/contributors-guide.md
new file mode 100644
index 000..d42ac8e
--- /dev/null
+++ b/contributor/contributors-guide.md
@@ -0,0 +1,649 @@
+---
+title: Contributor Guide
+permalink: /contributors-guide/
+---
+
+This page contains resources and documentation of interest to current and 
potential contributors to the Accumulo project. Any documentation that is 
helpful to Accumulo users should go in the [Accumulo User Manual][manual].
+
+If your are interested in quickly getting an Accumulo instance up and running, 
see the Accumulo Quickstart guides [(1.x)][quickstart1x]/[(2.x)][quickstart2x] 
or refer to the [Uno] project on Github.
+
+- [How to contribute to Apache Accumulo][1]
+- [Project Resources][2]
+  - [GitHub][3]
+  - [JIRA][4]
+  - [Jenkins/TravisCI][5]
+- [Create a Ticket for Bugs or New Features][6]
+- [Building Accumulo from Source][7]
+  - [Installing Apache Thrift][29]
+  - [Checking out from Git][8]
+  - [Running a Build][9]
+- [Providing a contribution][10]
+  - [Proposed Workflow][11]
+  - [The Implementation][12]
+- [Contributors][13]
+- [Developers][14]
+  - [Primary Development][15]
+  - [Reviewing Contributor Changes][16]
+  - [Submit Contribution via Patch][17]
+  - [Submit Contribution via Pull Request][18]
+  - [Feature Branches][19]
+  - [Changes Which Affect Multiple-Versions (a.k.a Merging)][20]
+- [Code Review Process][21]
+- [Additional Contributor Information][22]
+  - [Coding Practices][25]
+  - [Merging Practices][23]
+  - [Project Examples][26]
+  - [Website Contributions][27]
+  - [Public API][24]
+  - [Contrib Projects][28]
+- [Committer Documentation][32]
+- [Project Governance][33]
+
+
+## How to Contribute to Apache Accumulo
+
+Apache Accumulo welcomes contributions from the community. This is especially 
true of new contributors! You don?t need to be a software developer to 
contribute to Apache Accumulo. So, if you want to get involved in Apache 
Accumulo, there is almost certainly a role for you. View our [How to 
Contribute](/how-to-contribute/) page for additional details on the many 
opportunities available.
+
+## Project Resources
+
+Accumulo makes use of the following external tools for development.
+
+### GitHub
+
+Apache Accumulo source code is maintained using [Git] version control and 
mirrored to [GitHub][github]. Source files can be browsed [here][browse] or at 
the [GitHub mirror][mirror]. 
+
+The project code can be checked-out [here][mirror]. It builds with [Apache 
Maven][maven].
+
+### JIRA
+
+Accumulo [tracks issues][jiraloc] with [JIRA][jira]. Prospective code 
contributors can view [open issues labeled for "newbies"][newbies] to search 
for starter tickets. Note that every commit should reference a JIRA ticket of 
the form ACCUMULO-#. 
+
+### Jenkins/TravisCI
+
+Accumulo uses [Jenkins][jenkins] and 
[TravisCI](https://travis-ci.org/apache/accumulo) for automatic builds and 
continuous integration.
+
+https://builds.apache.org/job/Accumulo-Master/lastBuild/buildStatus; 
style="height: 1.1em"> [Master][masterbuild]
+

[jira] [Updated] (ACCUMULO-4740) Enable GCM mode for crypto

2017-11-15 Thread ASF GitHub Bot (JIRA)

 [ 
https://issues.apache.org/jira/browse/ACCUMULO-4740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

ASF GitHub Bot updated ACCUMULO-4740:
-
Labels: pull-request-available  (was: )

> Enable GCM mode for crypto
> --
>
> Key: ACCUMULO-4740
> URL: https://issues.apache.org/jira/browse/ACCUMULO-4740
> Project: Accumulo
>  Issue Type: Improvement
>Affects Versions: 2.0.0
>Reporter: Nick Felts
>Assignee: Nick Felts
>Priority: Minor
>  Labels: pull-request-available
>
> Enable the use of GCM as an optional encryption mode.   
> While this change will allow for GCM, it should probably only be used for 
> Java 9 and later.  
> https://docs.oracle.com/javase/9/whatsnew/toc.htm#JSNEW-GUID-71A09701-7412-4499-A88D-53FA8BFBD3D0
>   
> http://openjdk.java.net/jeps/246



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[GitHub] PircDef opened a new pull request #322: ACCUMULO-4740 Enable GCM mode for crypto

2017-11-15 Thread GitBox
PircDef opened a new pull request #322: ACCUMULO-4740 Enable GCM mode for crypto
URL: https://github.com/apache/accumulo/pull/322
 
 
   Introduced the GCMParameterSpec constructor required by cipher
   Updated IV management for AES-GCM (see Appendix A of NIST SP 800-38D)


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[GitHub] mikewalch commented on a change in pull request #39: Added PircDef to people.md and updated release notes.

2017-11-15 Thread GitBox
mikewalch commented on a change in pull request #39: Added PircDef to people.md 
and updated release notes.
URL: https://github.com/apache/accumulo-website/pull/39#discussion_r151144434
 
 

 ##
 File path: _posts/release/2017-09-05-accumulo-2.0.0.md
 ##
 @@ -18,6 +18,16 @@ always return `false` instead of `true`, even if the 
contents are equal.
 [ACCUMULO-3652] - Replaced string concatenation in log statements with slf4j
 where applicable. Removed tserver TLevel logging class.
 
+[ACCUMULO-4733] - Introduced a new configuration option,
 
 Review comment:
   The `[link]` indicates a link in markdown.  You just need to add the URLs to 
the bottom of the page:
   
   ```
   [ACCUMULO-4733]: https://issues.apache.org/jira/browse/ACCUMULO-4733
   [ACCUMULO-4737]: https://issues.apache.org/jira/browse/ACCUMULO-4737
   ```


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[jira] [Created] (ACCUMULO-4740) Enable GCM mode for crypto

2017-11-15 Thread Nick Felts (JIRA)
Nick Felts created ACCUMULO-4740:


 Summary: Enable GCM mode for crypto
 Key: ACCUMULO-4740
 URL: https://issues.apache.org/jira/browse/ACCUMULO-4740
 Project: Accumulo
  Issue Type: Improvement
Affects Versions: 2.0.0
Reporter: Nick Felts
Assignee: Nick Felts
Priority: Minor


Enable the use of GCM as an optional encryption mode.   

While this change will allow for GCM, it should probably only be used for Java 
9 and later.  

https://docs.oracle.com/javase/9/whatsnew/toc.htm#JSNEW-GUID-71A09701-7412-4499-A88D-53FA8BFBD3D0
  
http://openjdk.java.net/jeps/246



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[GitHub] PircDef opened a new pull request #39: Added PircDef to people.md and updated release notes.

2017-11-15 Thread GitBox
PircDef opened a new pull request #39: Added PircDef to people.md and updated 
release notes.
URL: https://github.com/apache/accumulo-website/pull/39
 
 
   


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services