Re: [DISCUSS] What to do about encryption at rest?

2015-11-04 Thread Adam Fuchs
Bill, Do you envision one of the following as the driver behind finer-grained encryption?: 1. We would only encrypt certain columns in order to get better performance; 2. We would use different keys on different columns in order to revoke access to a column via the key store; 3. We would only

[DISCUSS] What to do about encryption at rest?

2015-11-04 Thread William Slacum
@Adam, column family level encryption can be useful for multi-tenant environments, and I think it maps pretty well to the document partitioning/sharding/wikisearch style tables. Things are trickier in Accumulo than in HBase since there isn't a 1:1 mapping between column families and files. The