[jira] [Resolved] (IMPALA-14932) Disable ai_generate_text in FIPS mode

["Yida Wu (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/IMPALA-14932?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Yida Wu resolved IMPALA-14932.
------------------------------
    Fix Version/s: Impala 5.0.0
       Resolution: Fixed

> Disable ai_generate_text in FIPS mode
> -------------------------------------
>
>                 Key: IMPALA-14932
>                 URL: https://issues.apache.org/jira/browse/IMPALA-14932
>             Project: IMPALA
>          Issue Type: Improvement
>          Components: Backend
>            Reporter: Yida Wu
>            Assignee: Yida Wu
>            Priority: Major
>             Fix For: Impala 5.0.0
>
>
> Impala AI functions ai_generate_text, ai_generate_text_default rely on JCEKS for credential storage. These functions support two credential types, JCEKS and plain. However, JCEKS uses non-FIPS-approved algorithms, and credential_type="plain" is also not FIPS-compliant. Therefore, these functions should be better to disable in FIPS mode for now. Support for FIPS-compliant keystores for credential (e.g., BCFKS) may be explored in the future.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)