Status

Current state["Under Discussion"]

Discussion thread: https://lists.apache.org/thread/9fw336om8klgdhtrp4cl061vmclt1nd8

JIRA or Github Issue: 

Released: <Doris Version>

Google Doc: <If the design in question is unclear or needs to be discussed and reviewed, a Google Doc can be used first to facilitate comments from others.>

Motivation

The Doris Data Encryption Plugin (TDE) is designed to automatically encrypt and decrypt sensitive data on storage devices. Before data is written to the disk, TDE automatically encrypts the data and writes it to the disk. When data needs to be read, TDE automatically decrypts the data, allowing authenticated users to access it without restrictions while ensuring that sensitive data stored on the medium is securely protected.


Features: - Provides transparent encryption and decryption of sensitive data, enabling secure data storage encryption based on Doris. - Currently supports encryption using symmetric key algorithms, including AES (with key lengths of 128 bits, 192 bits, and 256 bits) and SM4 (128 bits).

Related Research


Detailed Design


Scheduling