723518c390
Bulk transfer of EAR functionality. Includes all providers etc. Could maybe break up into smaller blocks, but once it gets down to the core of it, would require messing with code instead of just moving. So this is it. Note: KMIP support is disabled unless you happen to have the kmipc SDK in your scylla dir. Adds optional encryption of sstables and commitlog, using block level file encryption. Provides key sourcing from various sources, such as local files or popular KMS systems.
35 lines
651 B
C++
35 lines
651 B
C++
/*
|
|
* Copyright (C) 2015 ScyllaDB
|
|
*
|
|
*/
|
|
|
|
/*
|
|
* SPDX-License-Identifier: LicenseRef-ScyllaDB-Source-Available-1.0
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include "encryption.hh"
|
|
#include "../../bytes.hh"
|
|
|
|
namespace encryption {
|
|
|
|
class symmetric_key;
|
|
|
|
class system_key {
|
|
public:
|
|
virtual ~system_key() {}
|
|
virtual future<shared_ptr<symmetric_key>> get_key() = 0;
|
|
virtual const sstring& name() const = 0;
|
|
virtual bool is_local() const = 0;
|
|
virtual future<> validate() const;
|
|
|
|
future<sstring> encrypt(const sstring&);
|
|
future<sstring> decrypt(const sstring&);
|
|
future<bytes> encrypt(const bytes&);
|
|
future<bytes> decrypt(const bytes&);
|
|
};
|
|
|
|
}
|
|
|