Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-16463

Improve transparent table/CF encryption with Commons Crypto

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.0.0
    • 2.0.0
    • encryption
    • None
    • Reviewed
    • Hide
      Improve transparent table/CF encryption with Commons Crypto. The change introduces a new optional CryptoCipherProvider (CommonsCryptoAES) for transparent table/CF encryption. And the encryption performance would be accelerated by hardware in modern CPU (AES-NI). This feature could be enabled by updating the configuration "hbase.crypto.cipherprovider" to "org.apache.hadoop.hbase.io.crypto.CryptoCipherProvider" in hbase-site.xml. For detailed information about transparent table/CF encryption including configuration examples see the Security section of the HBase manual.
      Show
      Improve transparent table/CF encryption with Commons Crypto. The change introduces a new optional CryptoCipherProvider (CommonsCryptoAES) for transparent table/CF encryption. And the encryption performance would be accelerated by hardware in modern CPU (AES-NI). This feature could be enabled by updating the configuration "hbase.crypto.cipherprovider" to "org.apache.hadoop.hbase.io.crypto.CryptoCipherProvider" in hbase-site.xml. For detailed information about transparent table/CF encryption including configuration examples see the Security section of the HBase manual.

    Description

      Apache Commons Crypto (https://commons.apache.org/proper/commons-crypto/index.html) is a cryptographic library optimized with AES-NI.
      HBASE-7544 introduces a framework for transparent encryption feature for protecting HFile and WAL data at rest. Currently JCE cipher is used bu default, the improvement will use Commons Crypto to accelerate the transparent encryption of HBase. new crypto provider with Commons CRYPTO will be provided for Transparent encryption.

      Attachments

        1. HBASE-16463.005.patch
          27 kB
          Dapeng Sun
        2. HBASE-16463.004.patch
          28 kB
          Dapeng Sun
        3. HBASE-16463.004.patch
          28 kB
          Dapeng Sun
        4. HBASE-16463.003.patch
          26 kB
          Dapeng Sun
        5. HBASE-16463.002.patch
          16 kB
          Dapeng Sun
        6. HBASE-16463.001.patch
          15 kB
          Dapeng Sun

        Issue Links

          is related to

          Improvement - An improvement or enhancement to an existing feature or task. HBASE-16988 Document for improve transparent table/CF encryption with Commons Crypto

          • Major - Major loss of function.
          • Open
          relates to

          Sub-task - The sub-task of the issue HBASE-13506 AES-GCM cipher support where available

          • Major - Major loss of function.
          • Open

          Sub-task - The sub-task of the issue HBASE-25304 Support AES-192 and AES-256 in DefaultCipherProvider

          • Major - Major loss of function.
          • Open

          New Feature - A new feature of the product, which has yet to be developed. HBASE-7544 Transparent table/CF encryption

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-13635 Replace Hadoop Common crypto code with Apache Commons Crypto

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. HBASE-16414 Improve performance for RPC encryption with Apache Common Crypto

          • Major - Major loss of function.
          • Resolved

          Umbrella - An overarching type made of sub-tasks HBASE-13503 Encryption improvements umbrella

          • Major - Major loss of function.
          • Open

          Activity

            People

              dapengsun Dapeng Sun
              dapengsun Dapeng Sun
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: