[
https://issues.apache.org/jira/browse/HDDS-17626?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrey Yarovoy reassigned HDDS-17626:
-------------------------------------
Assignee: Andrey Yarovoy
> Validate actual encryption strength before reporting AES256.
> ------------------------------------------------------------
>
> Key: HDDS-17626
> URL: https://issues.apache.org/jira/browse/HDDS-17626
> Project: Apache Ozone
> Issue Type: Improvement
> Components: s3gateway
> Reporter: Andrey Yarovoy
> Assignee: Andrey Yarovoy
> Priority: Major
>
> {{ServerSideEncryption.checkWrite()}} currently accepts any nonempty bucket
> encryption key name and echoes AES256. Ozone supports 128-bit TDE keys (the
> existing {{TestOzoneAtRestEncryption}} creates them), so a request for AES256
> can succeed while using AES-128. The follow-up should validate the effective
> encryption strength and reject configurations that cannot satisfy the
> request. Please include an integration test with a real 128-bit KMS key,
> since the new bucket stubs cannot detect this mismatch.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
