[HDDS-1041] Ozone Encryption At Rest (implemented)

Authors: Xiaoyu Yao
2019-02-08

 

Summary
Transparent Data Encryption encrypts the data before store it

Abstract

Design is very similar to HDFS TDE feature. Using KMS encrypts the data before store and decrypt it after reading.

Link

https://issues.apache.org/jira/secure/attachment/12957995/Ozone%20Encryption%20At-Rest%20-%20V2019.2.7.pdf