[
https://issues.apache.org/jira/browse/PARQUET-1373?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gidon Gershinsky updated PARQUET-1373:
--------------------------------------
Description:
Parquet Modular Encryption (PARQUET-1178) provides an API that accepts keys,
arbitrary key metadata and key retrieval callbacks - which allows to implement
basically any key management policy on top of it. This Jira will add tools that
implement a set of best practice elements for key management. This is not an
end-to-end key management, but rather a set of components that might simplify
design and development of an end-to-end solution.
For example, the tools will cover
* modification of key metadata inside existing Parquet files.
* support for re-keying that doesn't require modification of Parquet files.
Parquet will not mandate a use of these tools. Users will be able to continue
working with the basic API, to create any custom key management solution that
addresses their security requirements. If helps, they can also utilize some or
all of these tools.
was:
Parquet Modular Encryption
([PARQUET-1178|https://issues.apache.org/jira/browse/PARQUET-1178]) provides an
API that accepts keys, arbitrary key metadata and key retrieval callbacks -
which allows to implement basically any key management policy on top of it.
This Jira will add tools that implement a set of best practice elements for key
management. This is not an end-to-end key management, but rather a set of
components that might simplify design and development of an end-to-end solution.
For example, the tools will cover
* modification of key metadata inside existing Parquet files.
* support for re-keying that doesn't require modification of Parquet files.
Parquet will not mandate a use of these tools. Users will be able to continue
working with the basic API, to create any custom key management solution that
addresses their security requirements. If helps, they can also utilize some or
all of these tools.
> Encryption key management tools
> --------------------------------
>
> Key: PARQUET-1373
> URL: https://issues.apache.org/jira/browse/PARQUET-1373
> Project: Parquet
> Issue Type: New Feature
> Components: parquet-mr
> Reporter: Gidon Gershinsky
> Assignee: Gidon Gershinsky
> Priority: Major
>
> Parquet Modular Encryption (PARQUET-1178) provides an API that accepts keys,
> arbitrary key metadata and key retrieval callbacks - which allows to
> implement basically any key management policy on top of it. This Jira will
> add tools that implement a set of best practice elements for key management.
> This is not an end-to-end key management, but rather a set of components that
> might simplify design and development of an end-to-end solution.
> For example, the tools will cover
> * modification of key metadata inside existing Parquet files.
> * support for re-keying that doesn't require modification of Parquet files.
>
> Parquet will not mandate a use of these tools. Users will be able to continue
> working with the basic API, to create any custom key management solution that
> addresses their security requirements. If helps, they can also utilize some
> or all of these tools.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
