You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Duong (Jira)" <ji...@apache.org> on 2023/01/06 01:46:00 UTC
[jira] [Updated] (HDDS-7733) Symmetric Key For Ozone Token Signatures
[ https://issues.apache.org/jira/browse/HDDS-7733?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Duong updated HDDS-7733:
------------------------
Description:
Today, Ozone uses RSA to sign its issued tokens like block read/write tokens. This contributes significantly to Ozone Manager latency, e.g. > 80% of key read latency.
The absolute solution is to use symmetric keys algorithms, e.g. HmacSha256, to sign the tokens.
This Jira is the epic story of all the efforts to design and implement token signatures using symmetric key algorithms.
Proposal: https://docs.google.com/document/d/1es32PId8XwDGONSRmp_NLvbSeALlf-fyXp0RJB5O3hg/edit#
was:
Today, Ozone uses RSA to sign its issued tokens like block read/write tokens. This contributes significantly to Ozone Manager latency, e.g. > 80% of key read latency.
The absolute solution is to use symmetric keys algorithms, e.g. HmacSha256, to sign the tokens.
This Jira is the epic story of all the efforts to design and implement token signatures using symmetric key algorithms.
> Symmetric Key For Ozone Token Signatures
> ----------------------------------------
>
> Key: HDDS-7733
> URL: https://issues.apache.org/jira/browse/HDDS-7733
> Project: Apache Ozone
> Issue Type: New Feature
> Components: Ozone Datanode, Ozone Manager, SCM
> Reporter: Duong
> Priority: Major
>
> Today, Ozone uses RSA to sign its issued tokens like block read/write tokens. This contributes significantly to Ozone Manager latency, e.g. > 80% of key read latency.
> The absolute solution is to use symmetric keys algorithms, e.g. HmacSha256, to sign the tokens.
> This Jira is the epic story of all the efforts to design and implement token signatures using symmetric key algorithms.
> Proposal: https://docs.google.com/document/d/1es32PId8XwDGONSRmp_NLvbSeALlf-fyXp0RJB5O3hg/edit#
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org