[jira] [Commented] (CASSANDRA-9633) Add ability to encrypt sstables

["Stefan Miklosovic (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CASSANDRA-9633?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17438744#comment-17438744 ] 

Stefan Miklosovic commented on CASSANDRA-9633:
----------------------------------------------

Hey! we are working again on this, big thanks to [~skokoori] who retrofitted / refactored the code from times of 3.x to current trunk (4.x). As of now we are fixing tests which are failing due to this change.

I expect to create a CEP for this ticket as there is a lot to discuss and some points are not clear yet. I should deliver that the next week.

> Add ability to encrypt sstables
> -------------------------------
>
>                 Key: CASSANDRA-9633
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-9633
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Legacy/Core
>            Reporter: Jason Brown
>            Assignee: shylaja kokoori
>            Priority: Normal
>              Labels: encryption, security, sstable
>             Fix For: 4.x
>
>
> Add option to allow encrypting of sstables.
> I have a version of this functionality built on cassandra 2.0 that piggy-backs on the existing sstable compression functionality and ICompressor interface (similar in nature to what DataStax Enterprise does). However, if we're adding the feature to the main OSS product, I'm not sure if we want to use the pluggable compression framework or if it's worth investigating a different path. I think there's a lot of upside in reusing the sstable compression scheme, but perhaps add a new component in cqlsh for table encryption and a corresponding field in CFMD.
> Encryption configuration in the yaml can use the same mechanism as CASSANDRA-6018 (which is currently pending internal review).



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org