search

syndicate-storage / syndicate

Internet-scale software-defined storage system
Apache License 2.0
56 stars 10 forks source link

Block encryption #19

Closed jcnelson closed 10 years ago

jcnelson commented 11 years ago

Make it so user blocks will be encrypted, and the decryption key will be transmitted to only authorized users.

The challenge is to do this efficiently, so that (1) modifying a block doesn't require downloading the whole file and re-encrypting it, and (2) a set of authorized users can read the data, without creating a ciphertext for each user. One approach is convergent encryption (as used in FarSite).

jcnelson commented 10 years ago

Don't use convergent encryption. Just have one symmetric key, encrypted with the public keys of the authorized readers and writers.

jcnelson commented 10 years ago

We will address this as a UG driver. It won't be a built-in feature.