Re: [PR] [SPARK-47318][Security] Adds HKDF round to AuthEngine key derivation [spark]

2024-03-14 Thread via GitHub
sweisdb commented on PR #45425: URL: https://github.com/apache/spark/pull/45425#issuecomment-1997757960 @dongjoon-hyun Will do. I would clarify that the best practice here would be to use TLS and not use a bespoke key exchange protocol. But if we are going to use a bespoke key exchan

Re: [PR] [SPARK-47318][Security] Adds HKDF round to AuthEngine key derivation [spark]

2024-03-14 Thread via GitHub
mridulm commented on PR #45425: URL: https://github.com/apache/spark/pull/45425#issuecomment-1996748945 +CC @vanzin, @srowen Can you also include the documentation change in the PR to call out the incompatibility introduced due to this ? Thanks -- This is an automated message from

[PR] [SPARK-47318][Security] Adds HKDF round to AuthEngine key derivation [spark]

2024-03-07 Thread via GitHub
sweisdb opened a new pull request, #45425: URL: https://github.com/apache/spark/pull/45425 ### What changes were proposed in this pull request? This change adds an additional pass through a key derivation function (KDF) to the key exchange protocol in `AuthEngine`. Currently, it uses