Encryption key management tools

[asfimport]

Parquet Modular Encryption (PARQUET-1178) provides an API that accepts keys, arbitrary key metadata and key retrieval callbacks - which allows to implement basically any key management policy on top of it. This Jira will add tools that implement a set of best practice elements for key management. This is not an end-to-end key management, but rather a set of components that might simplify design and development of an end-to-end solution.

This tool set is one of many possible. There is no goal to create a single or “standard” toolkit for Parquet encryption keys. Parquet has a Crypto Factory interface (PARQUET-1817) that allows to plug in different implementations of encryption key management.

Reporter: Gidon Gershinsky / @ggershinsky
Assignee: Gidon Gershinsky / @ggershinsky

Subtasks:

• [C++] Encryption key management
• Double wrapped key manager
• Key rotation tool
• [C++] Key rotation tool

Related issues:

• Parquet modular encryption (depends upon)
• High level interface to Parquet encryption (is depended upon by)
• Properties-Driven Interface to Parquet Encryption (is depended upon by)

PRs and other links:

• Design doc

_{Note: This issue was originally created as PARQUET-1373. Please see the migration documentation for further details.}

[asfimport]

Jason Brugger:
unsubscribe

On Wed, Jul 1, 2020 at 9:31 AM ASF GitHub Bot (Jira) jira@apache.org