-
Notifications
You must be signed in to change notification settings - Fork 3.9k
Closed
Description
Encryption key material keeps the information required to recover the keys by Parquet readers. Currently, only "internal storage mode" is supported, where the key material is stored inside Parquet file footers, and therefore can't be rotated (re-wrapped with refreshed master keys) in immutable files. The new mechanism in this Jira adds the advanced "external storage mode" for the key material, where the key material is stored in separate small files, that enable the key rotation. This mechanism will also implement the key rotation functionality.
Reporter: Gidon Gershinsky / @ggershinsky
Related issues:
- [C++][Dataset][Parquet] Support parquet modular encryption in the new Dataset API (Dependency)
- [C++][Parquet] Encryption key management tools (depends upon)
- [Python][Parquet] Enable usage of external key material and rotation for encryption keys in PyArrow (is depended upon by)
PRs and other links:
Note: This issue was originally created as ARROW-9960. Please see the migration documentation for further details.