[jira] [Commented] (CASSANDRA-14102) Vault support for transparent data encryption

["Stefan Podkowinski (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CASSANDRA-14102?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16311410#comment-16311410 ] 

Stefan Podkowinski commented on CASSANDRA-14102:
------------------------------------------------

I've now pushed a few commits to address the concerns expressed in my previous comment. Creating new {{EncryptionContext}} instances will now use the same cipher factory and key caches with less generated garbage.

> Vault support for transparent data encryption
> ---------------------------------------------
>
>                 Key: CASSANDRA-14102
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-14102
>             Project: Cassandra
>          Issue Type: New Feature
>            Reporter: Stefan Podkowinski
>            Assignee: Stefan Podkowinski
>              Labels: encryption
>             Fix For: 4.x
>
>
> Transparent data encryption provided by CASSANDRA-9945 can currently be used for commitlog and hints. The default {{KeyProvider}} implementation that we ship allows to use a local keystore for storing and retrieving keys. Thanks to the pluggable handling of the {{KeyStore}} provider and basic Vault related classes introduced in CASSANDRA-13971, a Vault based implementation can be provided as {{KeyProvider}} as well. 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org