[
https://issues.apache.org/jira/browse/ACCUMULO-980?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13569129#comment-13569129
]
Adam Fuchs commented on ACCUMULO-980:
-------------------------------------
If the plugin is given some information as to which key to use and to lookup
keys or query a service, then the rekeying should be implementable within the
plugin. As long as we tie the session key used to encrypt the RFile to some
other key and record that linkage in the file, then the plugin should be able
to lookup old keys or use a service to decrypt old keys after the key is
cycled. I believe this is in the current design, as part of the crypto info
block.
> support pluggable codecs for RFile
> ----------------------------------
>
> Key: ACCUMULO-980
> URL: https://issues.apache.org/jira/browse/ACCUMULO-980
> Project: Accumulo
> Issue Type: Improvement
> Reporter: Adam Fuchs
> Assignee: Adam Fuchs
> Fix For: 1.6.0
>
> Attachments: RFile-Changes-Proposal-V1.pdf
>
>
> As part of the encryption at rest story, RFile should support pluggable
> modules where it currently has hardcoded options for compression codecs. This
> is a natural place to add encryption capabilities, as the cost of encryption
> would likely not be significantly different from the cost of compression, and
> the block-level integration should maintain the same seek and scan
> performance. Given the many implementation options for both encryption and
> compression, it makes sense to have a plugin structure here.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
