Gabriel39 opened a new issue, #70313: URL: https://github.com/apache/doris/issues/70313
### Description Continue the native Iceberg Parquet encryption reader introduced by #70246 and #70248 by supporting authenticated page indexes and split-block Bloom filters. The physical reader currently bypasses encrypted ColumnIndex, OffsetIndex and Bloom modules. Indexed seeks must authenticate the original data-page ordinal, even after skipping earlier pages or reading a dictionary page. Module authentication and malformed-range errors must propagate, while absent optional indexes must preserve conservative reads. ### Expected scope and verification - Decrypt ColumnIndex, OffsetIndex, Bloom header and Bloom bitset with their distinct module AAD. - Preserve physical page ordinals and serialized disk sizes during indexed reads and cache-header reconciliation. - Compare pruned and unpruned encrypted/plaintext scans using independently generated Java fixtures, including effective pruning counters. - Cover Page V1/V2, dictionaries, multiple row groups, wrong module/file/row-group/column identities, corruption, bounded allocation and plaintext cache hits. - Add SQL regressions for the plaintext control and the existing keyless-read rejection contract. Encrypted SQL admission and shared decrypted caches remain separate integration work. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
