Skip to content

Conversation

ChoHee15
Copy link

@ChoHee15 ChoHee15 commented Aug 9, 2025

Description

This PR implements a new encrypt component for Storage, providing an optional encryption feature. This solution will enhance the security of the data stored locally.

Related Issue

dragonflyoss/design#9

Motivation and Context

dragonflyoss/dragonfly#4026

Screenshots (if appropriate)

@ChoHee15 ChoHee15 marked this pull request as draft August 9, 2025 07:55
@ChoHee15 ChoHee15 marked this pull request as ready for review August 9, 2025 08:03
@ChoHee15
Copy link
Author

ChoHee15 commented Aug 9, 2025

@LunaWhispers Please review

@LunaWhispers LunaWhispers requested review from LunaWhispers and removed request for xujihui1985, yxxhero, gaius-qi, CormickKneey and chlins August 9, 2025 13:21
@dragonflyoss dragonflyoss locked and limited conversation to collaborators Aug 25, 2025
@dragonflyoss dragonflyoss unlocked this conversation Aug 25, 2025
@LunaWhispers LunaWhispers added the enhancement New feature or request label Aug 25, 2025
- Now the pieces of one task use the same key and nonce
- Key is derived from (the primary key, task_id), so every task uses different key
- EncryptReader will seek corresponding offset to encrypt piece plaintext
- When export encrypted files, we can decrypt whole file stream instead of decrypting every single piece

Signed-off-by: chohee <[email protected]>
Signed-off-by: chohee <[email protected]>
@ChoHee15 ChoHee15 changed the title [WIP] feat: Add cache encryption implementation for Storage feat: Add cache encryption implementation for Storage Sep 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants