org.apache.hadoop.hbase.security

Class EncryptionUtil

java.lang.Object

org.apache.hadoop.hbase.security.EncryptionUtil

@InterfaceAudience.Private
@InterfaceStability.Evolving
public class EncryptionUtil
extends Object

Some static utility methods for encryption uses in hbase-client.

Constructor Summary

Constructors

Constructor and Description
EncryptionUtil()

Method Summary

Methods

Modifier and Type	Method and Description
static Key	unwrapKey(org.apache.hadoop.conf.Configuration conf, String subject, byte[] value) Unwrap a key by decrypting it with the secret key of the given subject.
static byte[]	wrapKey(org.apache.hadoop.conf.Configuration conf, byte[] key, String algorithm) Protect a key by encrypting it with the secret key of the given subject.
static byte[]	wrapKey(org.apache.hadoop.conf.Configuration conf, String subject, Key key) Protect a key by encrypting it with the secret key of the given subject.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EncryptionUtil

public EncryptionUtil()

Method Detail

wrapKey

public static byte[] wrapKey(org.apache.hadoop.conf.Configuration conf,
             byte[] key,
             String algorithm)
                      throws IOException

Protect a key by encrypting it with the secret key of the given subject. The configuration must be set up correctly for key alias resolution.

Parameters:

conf - configuration

key - the raw key bytes

algorithm - the algorithm to use with this key material

Returns:

the encrypted key bytes

Throws:

IOException

wrapKey

public static byte[] wrapKey(org.apache.hadoop.conf.Configuration conf,
             String subject,
             Key key)
                      throws IOException

Protect a key by encrypting it with the secret key of the given subject. The configuration must be set up correctly for key alias resolution. Keys are always wrapped using AES.

Parameters:

conf - configuration

subject - subject key alias

key - the key

Returns:

the encrypted key bytes

Throws:

IOException

unwrapKey

public static Key unwrapKey(org.apache.hadoop.conf.Configuration conf,
            String subject,
            byte[] value)
                     throws IOException,
                            KeyException

Unwrap a key by decrypting it with the secret key of the given subject. The configuration must be set up correctly for key alias resolution. Keys are always unwrapped using AES.

Parameters:

conf - configuration

subject - subject key alias

value - the encrypted key bytes

Returns:

the raw key bytes

Throws:

IOException

KeyException