Re: Encryption At Rest Question

2015-02-24 Thread Charles Lamb
On 2/24/2015 8:56 PM, Liu, Yi A wrote: The data is decrypted on client side after obtaining DEK from KMS, *not* decrypted by DN. My colleague Yi is correct that data is not decrypted by the DN with one exception: WebHDFS uses the DN as the proxy and therefore the DN does the decryption in that

RE: Encryption At Rest Question

2015-02-24 Thread Liu, Yi A
[mailto:karth...@gmail.com] Sent: Wednesday, February 25, 2015 3:48 AM To: u...@hadoop.apache.org Cc: hdfs-dev@hadoop.apache.org Subject: Re: Encryption At Rest Question I was trying out the Transparent data at rest encryption and was able to setup the KMS, zones etc. and add files to the zone. How do