Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Initiating message is sent by discovery. 
    1. Initiating message should contain: 
      1. New master key hash
      2. New master key id.
    2. When server node processed message following actions are executed: 
      1. It obtain hash of new master key.
      2. Compares it with the one in message
      3. If it differs then error added to the message.
  2. If on step1 there are some errors we log it and cancel process. Otherwise got to step3.
  3. Action message is sent by discovery.
    1. Action message sould contain:
      1. New master key hash
      2. New master key id.
    2. When server node processed message following actions are executed: 
      1. Blocks creation of encrypted cache key. 
      2. Encrypt cache group keys with new master key. 
      3. Unblock creation of encrypted cache key. 
      4. EncryptionSPI executes keys rotation (implementation specific).

Process completion: 

Process completes when all nodes in cluster will process action message.

...

  1. Obtain old master key by id
  2. Obtain new master key by id
  3. Reencrypt cache group keys with new master key and store it to metastore.
  4. EncryptionSPI executes keys rotation (implementation specific).


New commands: 

  • Master key hashes. 

    • Inputnothing 

    • Output: 

      • List of Tuples3 

        • Node ID 

        • Current key hash 

        • Previous key hash or null. 

  • Cache key hashes. 

    • Inputcache id. 

    • Output: 

      • List of Tuples3 

        • Node ID 

        • Current key hash 

        • Previous key hash or null.