Details
-
New Feature
-
Status: Resolved
-
Major
-
Resolution: Done
-
1.12.0
-
None
Description
A mechanism for modular encryption and decryption of Parquet files. Allows to keep data fully encrypted in the storage - while enabling efficient analytics on the data, via reader-side extraction / authentication / decryption of data subsets required by columnar projection and predicate push-down.
Enables fine-grained access control to column data by encrypting different columns with different keys.
Supports a number of encryption algorithms, to account for different security and performance requirements.
Attachments
Issue Links
- Blocked
-
SPARK-25858 Passing Field Metadata to Parquet
- Resolved
- depends upon
-
PARQUET-1300 [C++] Parquet modular encryption
- Resolved
-
PARQUET-1906 CLONE - [C++] Parquet modular encryption
- Resolved
- is depended upon by
-
PARQUET-1376 Data obfuscation layer for encryption
- Open
-
PARQUET-1457 [C++] Data set integrity tool
- Open
-
PARQUET-1373 Encryption key management tools
- Resolved
-
PARQUET-1568 High level interface to Parquet encryption
- Resolved
-
PARQUET-1397 Sample of usage Parquet-1396 and Parquet-1178 for column level encryption with pluggable key access
- Open
- relates to
-
HIVE-25119 Upgrade Parquet to 1.12.0
- Open
- links to