Blowfish encryption

50 views
Skip to first unread message

andy

unread,
Nov 1, 2012, 11:47:20 PM11/1/12
to storm...@googlegroups.com
Nathan,

To ensure data security, I am exploring whether we could enable blowfish encryption of 0MQ messages.

More specifically, I'm thinking of the following approach:
  (1) Introduce a new configuration parameter, say topology.kryo.secret_key. Its default value is null, which means no encryption.
       Otherwise, it should be a blowfish secret key.
  (2) If the blowfish secret key is given, we will use the following serializer for ListDelegate.class
       new BlowfishSerializer(new SerializableSerializer(), secret_key)

My initial test indicates this simple solution should work.

Any concerns?

Andy

Nathan Marz

unread,
Nov 2, 2012, 1:22:14 AM11/2/12
to storm-user
I think really all you need is Storm to provide pluggable serialization for ListDelegate. Then you could add in whatever encryption scheme you want on top of that. Feel free to open an issue for that.
--
Twitter: @nathanmarz
http://nathanmarz.com

Anish Mohammed

unread,
Nov 2, 2012, 6:14:16 AM11/2/12
to storm...@googlegroups.com
Hi Andy,
two quick questions, 
1) is there any specific reason why you want encryption ?
2) why blowfish and specific reason for choosing it ?
regards
Anish
--
Anish Mohammed
http://uk.linkedin.com/in/anishmohammed
@anishmohammed
Reply all
Reply to author
Forward
0 new messages