Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Motivation

Cache encryption key rotation required in case of it compromising or at the end of crypto period (key validity period). in addition, such feature is required to provide support for encrypt and descrypt existing caches in the future.

...

This strategy requires changing the format of the encryption page to store the identifier (number) of the encryption key.

Comparison


in placecopy
IO volume2+2
overhead

yes(1-2 bytes per page)

no

performance(rough estimate)

slowerfaster

Implementation complexity (rough estimate)

online updatessimplecomplex
topology changessimplecomplex

Copy with re-encryption design.

...