You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2020/10/30 04:33:00 UTC

[jira] [Commented] (IMPALA-10298) Change column mask hash function as SHA512 in FIPS mode

    [ https://issues.apache.org/jira/browse/IMPALA-10298?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17223406#comment-17223406 ] 

ASF subversion and git services commented on IMPALA-10298:
----------------------------------------------------------

Commit 1682afcda6e28571c83200a89f0e334a5ae49aa7 in impala's branch refs/heads/master from wzhou-code
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=1682afc ]

IMPALA-10298: Change column mask hash as SHA512 in FIPS mode

Column masking API is called by Ranger during policy evaluation.
Ranger team requires to change the column mask hash as SHA-512 in
FIPS mode without changing API.
This patch changes the MaskFunctions::MaskHash() for string type
to use SHA-512 in FIPS mode.

Testing:
 - Passed exhaustive tests.
 - Manually test the API.

Change-Id: I422d4b11b31c3e6eb7963260a1da730579c4ca74
Reviewed-on: http://gerrit.cloudera.org:8080/16671
Reviewed-by: Impala Public Jenkins <im...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>


> Change column mask hash function as SHA512 in FIPS mode
> -------------------------------------------------------
>
>                 Key: IMPALA-10298
>                 URL: https://issues.apache.org/jira/browse/IMPALA-10298
>             Project: IMPALA
>          Issue Type: Improvement
>          Components: Backend
>    Affects Versions: Impala 4.0
>            Reporter: Wenzhe Zhou
>            Assignee: Wenzhe Zhou
>            Priority: Major
>
> Column masking API in Impala needs to be updated to use SHA-512 for FIPS enabled cluster. This API is called by Ranger during policy evaluation.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org