asfimport

Thomas Mueller ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15189211&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15189211)) Your proposal doesn't sound very secure. I would recommend to rename this feature as "scrambling", and not use the term "encryption". > you are correct...

Karl Sanders ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15189316&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15189316)) I would like to let you know that I made the H2 and HSQLDB communities aware about this interest in providing a secure backend for...

Thomas Mueller ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15189351&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15189351)) > More importantly, with file-level encryption, data would reside in an unencrypted form in memory which is not acceptable to our security team You could...

Thomas Mueller ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15191059&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15191059)) The approach taken in #3304 sounds sensible to me: "AESDirectory extends FSDirectory". Even thought the patch would need to be improved: nowadays XTS should be...

Karl Sanders ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15192849&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15192849)) There's an apparently abandoned project that might be of interest: https://code.google.com/archive/p/lucenetransform/ It appears to be implementing compression and encryption for Lucene indexes. I also found...

Renaud Delbru ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15197431&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15197431)) Thanks for all of the feedback. Based on everyone's comments, it seems like different encryption algorithms might be better depending on the situation. Rather than...

Karl Sanders ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15202629&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15202629)) > Rather than implement a one-size-fits-all solution then, perhaps it would be better not to enforce any one cipher and instead leave some flexibility for...

Renaud Delbru ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15204549&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15204549)) Karl, the patch will not include a ready to use FSDirectory implementation, but the doc value format is based on an encrypted index input and...

Renaud Delbru ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15210108&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15210108)) This patch contains the current state of the codec for index-level encryption. It is up to date with the latest version of the lucene-solr master...

Renaud Delbru ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15226365&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15226365)) This patch includes changes so that every encrypted data block uses a new iv. The iv is encoded in the header of the data block....