Package org.gridgain.internal.encryption.configuration

Class ReencryptionConfigurationSchema

java.lang.Object

org.gridgain.internal.encryption.configuration.ReencryptionConfigurationSchema

Direct Known Subclasses:

PageMemoryReencryptionConfigurationSchema

@PolymorphicConfig
public class ReencryptionConfigurationSchema
extends Object

Base configuration schema for background data re-encryption during DEK rotation.

When a Data Encryption Key (DEK) is rotated, data encrypted with the old key must be re-encrypted with the new one. How that happens is storage-engine specific, so this schema is polymorphic: each engine that supports background re-encryption contributes its own instance (see PageMemoryReencryptionConfigurationSchema for the page-memory / aipersist engine). Common settings shared by every engine live here; engine-specific ones (such as the page batch size) live in the concrete instance.

Field Summary

Fields

Modifier and Type	Field	Description
boolean	enabled	Whether background re-encryption is enabled.
String	engine	Storage engine this re-encryption configuration applies to.

Constructor Summary

Constructors

Constructor	Description
ReencryptionConfigurationSchema()

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

engine

@PolymorphicId(hasDefault=true)
public String engine

Storage engine this re-encryption configuration applies to.

enabled

@Value(hasDefault=true)
public boolean enabled

Whether background re-encryption is enabled.

When enabled, rotating a DEK automatically starts a background task that re-encrypts the existing data with the new active DEK. When disabled, data is re-encrypted lazily when it is next modified.

Constructor Details

ReencryptionConfigurationSchema

public ReencryptionConfigurationSchema()