Andrey Yarovoy created HDDS-17626:
-------------------------------------
Summary: Validate actual encryption strength before reporting
AES256.
Key: HDDS-17626
URL: https://issues.apache.org/jira/browse/HDDS-17626
Project: Apache Ozone
Issue Type: Improvement
Components: s3gateway
Reporter: Andrey Yarovoy
{{ServerSideEncryption.checkWrite()}} currently accepts any nonempty bucket
encryption key name and echoes AES256. Ozone supports 128-bit TDE keys (the
existing {{TestOzoneAtRestEncryption}} creates them), so a request for AES256
can succeed while using AES-128. The follow-up should validate the effective
encryption strength and reject configurations that cannot satisfy the request.
Please include an integration test with a real 128-bit KMS key, since the new
bucket stubs cannot detect this mismatch.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
