Gabriel39 opened a new issue, #70245:
URL: https://github.com/apache/doris/issues/70245

   Iceberg encrypted metadata planning and the file-key wire contract are 
available after #70192 and #70213, but native encrypted Parquet data-file 
reading is not implemented yet.
   
   The next independently reviewable units are:
   - Extract each data file's StandardKeyMetadata key and AAD into every scan 
split, preserving plaintext files and rejecting malformed metadata without 
exposing key material.
   - Decrypt Parquet encrypted footers, page headers, dictionary pages and data 
pages through parquet-cpp crypto primitives, while keeping the native Doris 
decoder.
   
   Keep encrypted SQL admission disabled during these stages. Encrypted 
indexes, delete files and final scan integration need their own follow-up 
validation before execution is enabled.
   
   Also fix the encrypted metadata fixture reset so that retained HMS tables 
can be recreated after the disposable KMS restarts with fresh keys. Validate 
the first reset after restart with the SDK and Spark reference readers.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to