[
https://issues.apache.org/jira/browse/ACCUMULO-958?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13566572#comment-13566572
]
Eric Newton commented on ACCUMULO-958:
--------------------------------------
Isn't there already an extension mechanism for FileSystem? Replace the
FileSystem with a new kind of FileSystem which will de/encrypt data as it is
read or written.
> Support pluggable encryption in walogs
> --------------------------------------
>
> Key: ACCUMULO-958
> URL: https://issues.apache.org/jira/browse/ACCUMULO-958
> Project: Accumulo
> Issue Type: Improvement
> Components: logger
> Reporter: John Vines
> Assignee: Michael Allen
> Fix For: 1.5.0
>
> Attachments: ACCUMULO-958-actual-changes.patch, accumulo-958.diff
>
>
> There are some cases where users want encryption at rest for the walogs. It
> should be fairly trivial to implement it in such a way to insert a
> CipherOutputStream into the data path (defaulting to using a NullCipher) and
> then making the Cipher pluggable to users can insert the appropriate
> mechanisms for their use case.
> This also means swapping in CipherInputStream and putting in a check to make
> sure the Cipher type's match at read and write time. Possibly a versioning
> mechanism so people can migrate Ciphers.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
