...

The concept of the masterKeyId will be added to the cache keys encryption process in EncryptionSpi:

...

New methods

...

byte[] masterKeyDigest();

...

byte[] masterKeyDigest(String masterKeyId);

...

byte[] encryptKey(Serializable key);

...

byte[] encryptKey(Serializable key, String masterKeyId);

...

Serializable decryptKey(byte[] key);

will be introduced:

• setMasterKeyId(String masterKeyId) // Sets "current" master key id
• String getMasterKeyId() // Gets "current" master key id

Follow methods will work with master key that setted by previous method:

• byte[] masterKeyDigest()
• byte[] encryptKey(Serializable key)
• Serializable

...

• decryptKey(byte[]

...

• key

...

• )

...

This is necessary so that ignite can decrypt cache keys with the old master key and encrypt with the new one.

IgniteConfiguration

New methods will be added to the IgniteConfiguration:

...

.

...

Code changes

Meta Storage

Meta storage will store master key id.

...