AES Encrypted Directory [LUCENE-2228]
Provides an encryption solution for Lucene indexes, using the AES encryption algorithm. You must have the JCE Unlimited Strength Jurisdiction Policy Files 6 Release Candidate which you can get from java.sun.com.
Migrated from LUCENE-2228 by Jay Mundrawala, 8 votes, updated May 22 2020 Attachments: LUCENE-2228.patch, lucene-encryption.tar.gz Linked issues:
- #8023
- #10419
Michael McCandless (@mikemccand) (migrated from JIRA)
This looks cool!
Can you change the .tar.gz file into a patch? EG see here: http://wiki.apache.org/lucene-java/HowToContribute.
I think a good place for AESDirectory to live is in contrib/misc?
Jan Høydahl (@janhoy) (migrated from JIRA)
Is this encrypted directory in production somewhere? How secure is it? Performance overhead?
With the new requirement of PCI 4.0 that disk encryption cannot be the only protection for data at rest, this contribution becomes very crucial, is there any progress with this ? https://www.vikingcloud.com/blog/pci-dss-v4-are-you-using-disk-encryption