Data at rest encryption
Transparent data encryption (TDE) is about keeping HDFS data on disk encrypted. This HDFS data on disk is also called data at rest. This type of encryption is security key based. Keys are generally stored in a key management server either internal to Hadoop or as an external key storage.
As the name suggests, TDE is about encrypting data on the disk in a way that is transparent to the user accessing the data. As long as the user has access to the relevant security key, the Hadoop system would automatically encrypt data upon writing and decrypt data upon reading. For the user, it is as good as reading and writing non-encrypted data. All underlying encryption would be automatically managed by the Hadoop system. You just ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access