Xianda Ke 514dfaf9fd IMPALA-6128: Add support for AES-CTR encryption when spilling to disk ...

CFB mode is a stream cipher and is secure when used with a different nonce/IV
for every message. However it can be a performance bottleneck.
CTR mode is also stream cipher and is secure, 4~6x faster than CFB mode in
OpenSSL. AES-CTR+SHA256 is about 40~70% faster than AES-CFB+SHA256.

CTR mode is used if OpenSSL version>=1.0.1 at runtime, otherwise
fall back to using CFB mode.

Testing:
run runtime tmp-file-mgr-test, openssl-util-test, buffer-pool-test and
buffered-tuple-stream-test
The ut case openssl-util-test.EncryptInPlace tests encryption in both modes.

Change-Id: I9debc240615dd8cdbf00ec8730cff62ffef52aff
Reviewed-on: http://gerrit.cloudera.org:8080/8861
Reviewed-by: Tim Armstrong <tarmstrong@cloudera.com>
Tested-by: Impala Public Jenkins

2018-01-10 05:39:09 +00:00

..

generated-sources

IMPALA-3552: Make incremental stats max serialized size configurable

2016-11-15 03:22:11 +00:00

src

IMPALA-6128: Add support for AES-CTR encryption when spilling to disk

2018-01-10 05:39:09 +00:00

.gitignore

Updates several .gitignore files.

2017-08-31 01:40:47 +00:00

.impala.doxy

IMPALA-4110: Clean up issues found by Apache RAT.

2016-09-14 22:09:24 +00:00

CMakeLists.txt

IMPALA-4835 (prep only): create io subfolder and namespace

2017-11-17 22:47:34 +00:00