Re: Adding Encryption to lucene indexes

2011-08-14 Thread Grant Ingersoll
You might try searching JIRA, I believe there is an issue in there that attempts to provide an encrypted Directory implementation. You might also just use file system encryption. On Aug 12, 2011, at 8:09 PM, Chris Zakian wrote: > Hey, thanks for your reply Shaneal, > > I do have a person to

Re: Adding Encryption to lucene indexes

2011-08-12 Thread Chris Zakian
Hey, thanks for your reply Shaneal, I do have a person to consult with about the crypto code, it is just a matter of figuring out which streams to grab. So encrypting all of the write operations in IndexOutput (and DataOutput) and decrypting to plaintext in IndexInput on the way out should let me

Re: Adding Encryption to lucene indexes

2011-08-12 Thread Shaneal Manek
For starters, you probably shouldn't be writing your own crypto code (unless you're a professional cryptographer, or your project has access to one to audit your code). See, for example, http://chargen.matasano.com/chargen/2009/7/22/if-youre-typing-the-letters-a-e-s-into-your-code-youre-doing.html.

Adding Encryption to lucene indexes

2011-08-12 Thread Chris Zakian
Hello, I am currently adding Lucene (in combination with hibernate search) to a medical record service. As such, I need to encrypt the indexes so that unauthorized people don't have access to them by bypassing the system's database security. I was wondering if anyone had a) implemented a security