Skip to content
  • Daogang Qu's avatar
    089f1232
    WL#12079: Encrypt binary log caches at rest · 089f1232
    Daogang Qu authored
    Use AES with CTR mode to encrypt temporary files created when
    binary log caches spill to disk when binlog_encryption is on.
    Client sessions will have their binary log caches unencrypted
    when binlog_encryption is off and client sessions will have
    their binary log caches encrypted when binlog_encryption is on.
    Every time a transaction commits, it requests its binlog cache
    to be reset. On this reset operation, the binlog cache shall
    check `binlog_encryption` value to enable or disable its
    encryption, and close the ciphers and open them again using
    new password and IV when binlog_encryption is on.
    
    RB: 21577
    089f1232
    WL#12079: Encrypt binary log caches at rest
    Daogang Qu authored
    Use AES with CTR mode to encrypt temporary files created when
    binary log caches spill to disk when binlog_encryption is on.
    Client sessions will have their binary log caches unencrypted
    when binlog_encryption is off and client sessions will have
    their binary log caches encrypted when binlog_encryption is on.
    Every time a transaction commits, it requests its binlog cache
    to be reset. On this reset operation, the binlog cache shall
    check `binlog_encryption` value to enable or disable its
    encryption, and close the ciphers and open them again using
    new password and IV when binlog_encryption is on.
    
    RB: 21577
Loading