You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@parquet.apache.org by "Gidon Gershinsky (Jira)" <ji...@apache.org> on 2020/05/11 07:38:00 UTC
[jira] [Updated] (PARQUET-1373) Encryption key management tools
[ https://issues.apache.org/jira/browse/PARQUET-1373?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gidon Gershinsky updated PARQUET-1373:
--------------------------------------
Description:
Parquet Modular Encryption (PARQUET-1178) provides an API that accepts keys, arbitrary key metadata and key retrieval callbacks - which allows to implement basically any key management policy on top of it. This Jira will add tools that implement a set of best practice elements for key management. This is not an end-to-end key management, but rather a set of components that might simplify design and development of an end-to-end solution.
For example, the tools will cover
* modification of key metadata inside existing Parquet files.
* support for re-keying that doesn't require modification of Parquet files.
Parquet will not mandate a use of these tools. Users will be able to continue working with the basic API, to create any custom key management solution that addresses their security requirements. If helps, they can also utilize some or all of these tools.
was:
Parquet Modular Encryption ([PARQUET-1178|https://issues.apache.org/jira/browse/PARQUET-1178]) provides an API that accepts keys, arbitrary key metadata and key retrieval callbacks - which allows to implement basically any key management policy on top of it. This Jira will add tools that implement a set of best practice elements for key management. This is not an end-to-end key management, but rather a set of components that might simplify design and development of an end-to-end solution.
For example, the tools will cover
* modification of key metadata inside existing Parquet files.
* support for re-keying that doesn't require modification of Parquet files.
Parquet will not mandate a use of these tools. Users will be able to continue working with the basic API, to create any custom key management solution that addresses their security requirements. If helps, they can also utilize some or all of these tools.
> Encryption key management tools
> --------------------------------
>
> Key: PARQUET-1373
> URL: https://issues.apache.org/jira/browse/PARQUET-1373
> Project: Parquet
> Issue Type: New Feature
> Components: parquet-mr
> Reporter: Gidon Gershinsky
> Assignee: Gidon Gershinsky
> Priority: Major
>
> Parquet Modular Encryption (PARQUET-1178) provides an API that accepts keys, arbitrary key metadata and key retrieval callbacks - which allows to implement basically any key management policy on top of it. This Jira will add tools that implement a set of best practice elements for key management. This is not an end-to-end key management, but rather a set of components that might simplify design and development of an end-to-end solution.
> For example, the tools will cover
> * modification of key metadata inside existing Parquet files.
> * support for re-keying that doesn't require modification of Parquet files.
>
> Parquet will not mandate a use of these tools. Users will be able to continue working with the basic API, to create any custom key management solution that addresses their security requirements. If helps, they can also utilize some or all of these tools.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)