TDE Key storage needs to improve reliability
Open
- Dominant language
- C
- Stars
- 1.4k
- Forks
- 247
- Avg merge
- 4d 3h
- Merged PRs (30d)
- 39
Description
The encrypt key is very important data, we should do something to improve the reliability.
Add wal record for key to provide availability
Add CRC for the encrypted key
Contributor guide
Research direction
Start by locating the TDE encrypted-key storage and the WAL handling in the Cloudberry codebase; the issue names no files or tests. Trace how keys are persisted and recovered, then verify that a WAL record provides availability and that CRC detects corrupted encrypted keys.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- databases, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100