Add encryption meta to metapd.Region #666
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Yi Wu <yiwu@pingcap.com>
added 6 commits
August 28, 2020 05:08
Signed-off-by: Yi Wu <yiwu@pingcap.com>
Signed-off-by: Yi Wu <yiwu@pingcap.com>
Signed-off-by: Yi Wu <yiwu@pingcap.com>
Signed-off-by: Yi Wu <yiwu@pingcap.com>
Signed-off-by: Yi Wu <yiwu@pingcap.com>
yiwu-arbug
added
status/PTAL
added 2 commits
September 15, 2020 11:45
Signed-off-by: Yi Wu <yiwu@pingcap.com>
|
updated. PTAL |
yiwu-arbug
pushed a commit
to tikv/pd
that referenced
this pull request
Sep 16, 2020
Signed-off-by: Yi Wu <yiwu@pingcap.com> <!-- Thank you for working on PD! Please read PD's [CONTRIBUTING](https://github.com/tikv/pd/blob/master/CONTRIBUTING.md) document **BEFORE** filing this PR. PR Title Format: 1. pkg [, pkg2, pkg3]: what's changed 2. *: what's changed --> ### What problem does this PR solve? <!-- Add the issue link with a summary if it exists. --> This is part 1 for adding TDE support to PD. pingcap/tidb#18262 It contains helper methods for encryption. ### What is changed and how it works? This PR adds utility types and functions: * encrypt/decrypt data using aes-ctr (for encrypting region boundary keys) and aes-gcm (for encrypting data encryption keys) * helper methods to encrypt/decrypt region boundary keys in-place * wrapper of master key, and helper method to read a master key (must be a 256 bit encryption key, stored as hex-string) from a local file ### Check List <!-- Remove the items that are not applicable. --> Tests <!-- At least one of them must be included. --> - Unit test Related changes - depends on pingcap/kvproto#666 ### Release note * No release note
daimashusheng
pushed a commit
to daimashusheng/kvproto
that referenced
this pull request
Sep 2, 2021
Adding encryption meta to `metapb.Region`. This is going to be used by PD to encrypt the start_key and end_key when persisting the `Region` struct. Signed-off-by: Yi Wu <yiwu@pingcap.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Adding encryption meta to
metapb.Region. This is going to be used by PD to encrypt the start_key and end_key when persisting theRegionstruct.Signed-off-by: Yi Wu yiwu@pingcap.com