[ https://issues.apache.org/jira/browse/ACCUMULO-958?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13566572#comment-13566572 ]
Eric Newton commented on ACCUMULO-958: -------------------------------------- Isn't there already an extension mechanism for FileSystem? Replace the FileSystem with a new kind of FileSystem which will de/encrypt data as it is read or written. > Support pluggable encryption in walogs > -------------------------------------- > > Key: ACCUMULO-958 > URL: https://issues.apache.org/jira/browse/ACCUMULO-958 > Project: Accumulo > Issue Type: Improvement > Components: logger > Reporter: John Vines > Assignee: Michael Allen > Fix For: 1.5.0 > > Attachments: ACCUMULO-958-actual-changes.patch, accumulo-958.diff > > > There are some cases where users want encryption at rest for the walogs. It > should be fairly trivial to implement it in such a way to insert a > CipherOutputStream into the data path (defaulting to using a NullCipher) and > then making the Cipher pluggable to users can insert the appropriate > mechanisms for their use case. > This also means swapping in CipherInputStream and putting in a check to make > sure the Cipher type's match at read and write time. Possibly a versioning > mechanism so people can migrate Ciphers. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira