Hi All, The current spec says that the encryption key for table statistics should be stored as raw key-metadata. However, since the table statistics metadata is stored within the unencrypted table metadata, it's not secure to follow the spec here.
The proposal is two fold: 1) Deprecate the 'key-metadata' field in table statistics (Note, partition statistics doesn't have this field in the spec) 2) Add encryption 'key-id' field to table and partition statistics. This points to an encrypted encryption key stored in Table metadata's 'encryption-keys' (that in turn points to the KEK in the same list). This behaviour is similar to how we do the same for manifest list encryption keys. PR: https://github.com/apache/iceberg/pull/17533 Best Regards, Gabor Kaszab
