[ 
https://issues.apache.org/jira/browse/OAK-3761?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15112635#comment-15112635
 ] 

Timothee Maret edited comment on OAK-3761 at 1/22/16 4:33 PM:
--------------------------------------------------------------

[~alex.parvulescu] IMO the issue at stake is to figure out whether Oak wants to 
provide a general crypto API (and use it in its own implementation) or if it is 
fine otherwise.

How the default implementation of such general crypto API is done is not so 
important as long as it is easy to swap it for an alternative one.
Customers may anyway either chose or be required to run a certified (e.g. FIPS) 
crypto module or otherwise proprietary module that can't be linked here.

Assuming the Apache Oak team is not fine with the default implementation, we 
could as well ditch it (provide no implementation at all) or we could base the 
default implementation on a 3rd party open source crypto library which is 
license compatible with Apache.


was (Author: marett):
[~alex.parvulescu] IMO the issue at stake is to figure out whether Oak wants to 
provide a general crypto API (and use it in its own implementation) or if it is 
fine otherwise.

How the default implementation of such general crypto API is done is not so 
important as long as it is easy to swap the implementation for another one.
Customers may anyway either chose or be required to run a certified (e.g. FIPS) 
crypto module or otherwise proprietary module that can't be linked here.

Assuming the Apache Oak team is not fine with the default implementation, we 
could as well ditch it (provide no implementation at all) or we could base the 
default implementation on a 3rd party open source crypto library which is 
license compatible with Apache.

> Oak crypto API and implementation
> ---------------------------------
>
>                 Key: OAK-3761
>                 URL: https://issues.apache.org/jira/browse/OAK-3761
>             Project: Jackrabbit Oak
>          Issue Type: New Feature
>          Components: security
>    Affects Versions: 1.3.12
>            Reporter: Timothee Maret
>            Assignee: angela
>         Attachments: OAK-3761.patch, OAK-3761.patch
>
>
> As discussed in [0], this issue tracks adding a simple API and implementation 
> for encryption/decryption in Oak. 
> [0] 
> http://oak.markmail.org/search/?q=crypto#query:crypto+page:1+mid:iwsfd66lku2dzs2n+state:results



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to