You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "Sailesh Mukil (JIRA)" <ji...@apache.org> on 2018/02/05 23:18:00 UTC

[jira] [Resolved] (IMPALA-6219) Use AES-GCM for spill-to-disk encryption when CLMUL instruction is present and performant

     [ https://issues.apache.org/jira/browse/IMPALA-6219?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sailesh Mukil resolved IMPALA-6219.
-----------------------------------
    Resolution: Fixed

Thanks for the patch [~kexianda]!
Your commit can be found here:
https://github.com/apache/impala/commit/9b68645f9eb9e08899fda860e0946cc05f205479

IMPALA-6219: Use AES-GCM for spill-to-disk encryption

AES-GCM can be very fast(~10 times faster than CFB+SHA256), but it
requires an instruction that Impala can currently run without (CLMUL).
In order to be fast, we dispatch to GCM mode at run-time based on the
CPU and OpenSSL version.

Testing:
run runtime tmp-file-mgr-test, openssl-util-test, buffer-pool-test
and buffered-tuple-stream-test.
add two cases GcmIntegrity & EncryptoArbitraryLength for
openssl-util-test

Change-Id: I1ea87b82a8897ee8bfa187715ac1c52883790d24
Reviewed-on: http://gerrit.cloudera.org:8080/9032
Reviewed-by: Sailesh Mukil <sa...@cloudera.com>
Tested-by: Impala Public Jenkins

> Use AES-GCM for spill-to-disk encryption when CLMUL instruction is present and performant
> -----------------------------------------------------------------------------------------
>
>                 Key: IMPALA-6219
>                 URL: https://issues.apache.org/jira/browse/IMPALA-6219
>             Project: IMPALA
>          Issue Type: Sub-task
>          Components: Backend
>    Affects Versions: Impala 2.11.0
>            Reporter: Jim Apple
>            Priority: Major
>             Fix For: Impala 2.12.0
>
>
> See parent ticket: IMPALA-6128. AES-GCM can be very fast, but it requires an instruction that Impala can currently run without (CLMUL) in order to be fast, so we could dispatch at run-time based on the CPU, using this mode when it is fast.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)