John Dickinson
http://linux.conf.au/schedule/present...
Recently, the OpenStack Swift project released a feature that implements server-side encryption. The feature is designed to protect user data from being exposed if drives were to leave the cluster, something that can happen intentionally through an RMA process or unintentionally from mistakes or malicious intent. If drives leave the cluster, we want to be sure that the users' data is protected and impossible to recover. Swift's at-rest encryption feature encrypts user data and metadata with AES using a unique key for every object stored.
In this talk, we will cover the details of how the server-side encryption works, including the on-disk format, and we'll dig into the key-management used. Also, we'll discuss the ways in which this feature can be improved to support more advanced functionality and more robust key management.
localhost At-rest Encryption in OpenStack Swift | |
| 3 Likes | 3 Dislikes |
| 307 views views | 3.5K followers |
| Education Creative Commons Attribution licence (reuse allowed) | Upload TimePublished on 19 Jan 2017 |
Related keywords
lcare mexicana,camara de diputados,lca uanl,lcad,lca significado,lca virtual,lca arquitectos,lcai,local,l'carnitina,lca capital,lca pais,lca abogados y consultores,lcare mexicana s de rl de cv,lcat,alcatel,lcase,lcase vba,calidad,
