[jira] [Commented] (RANGER-3641) Add API to enhance KMS capabilities

["Bhavik Patel (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RANGER-3641?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17706330#comment-17706330 ] 

Bhavik Patel commented on RANGER-3641:
--------------------------------------

Anyone is looking to this?

> Add API to enhance KMS capabilities
> -----------------------------------
>
>                 Key: RANGER-3641
>                 URL: https://issues.apache.org/jira/browse/RANGER-3641
>             Project: Ranger
>          Issue Type: Improvement
>          Components: kms
>    Affects Versions: 3.0.0, 2.3.0
>            Reporter: kirby zhou
>            Priority: Major
>
> Some APIs are very useful.
>  
>  * GenerateEEK with decrypted EEK returned together
> Like:
> {EEK, EK} = GenerateEEK2(KeyVersion)
> This helps Program which request a EEK to encrypt something itself such like KUDU or MySQL.
> It now takes 2 RPC calls to complete encryption. If a API can return EEK and EK together, we can save 1 RPC call.
>  
>  * Simple Encryption and Decryption API
> Like:
> {EncryptedData} = Encrypt(KeyVersion, PlainData)
> {PlainData} = Decrypt(KeyVersion, EncryptedData)
> This helps Ranger KMS works for some simple situation such as encrypting password.
>  
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)