Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for using AES in JCA to encrypt and decrypt YAML values ​​in JDBC Driver #32872

Open
linghengqian opened this issue Sep 14, 2024 · 3 comments
Assignees

Comments

@linghengqian
Copy link
Member

Feature Request

For English only, other languages will not be accepted.

Please pay attention on issues you submitted, because we maybe need more details.
If no response anymore and we cannot make decision by current information, we will close it.

Please answer these questions before submitting your issue. Thanks!

Is your feature request related to a problem?

Describe the feature you would like.

  • Support for using AES in JCA to encrypt and decrypt YAML values ​​in ShardingSphere JDBC Driver. This is certainly less secure, but sounds simple enough for downstream users to understand how to create custom implementations.
  • Discuss potential solutions,
    • In contrast, neither alibaba/druid nor dromara/hutool provides English documentation, which may affect the translation of English documentation on the shardingsphere side, so I will not deal with it in the current issue.
    • jasypt/jasypt has English documentation, but this project has not been maintained for more than 1 year. We should avoid using libraries like apache/hive that have not been updated for 17 years, such as jpam.
    • Most of Spring Security Crypto's abstractions are designed for password encoding, not encryption and decryption. See org.springframework.security.crypto.encrypt.BytesEncryptor. It actually uses org.bouncycastle:bcpkix-jdk15on.
  • JCA is more in line with my thinking. The API is not finalized yet. This requires additional exploration.
@linghengqian
Copy link
Member Author

  • I am working on the current issue.

@lazyboyl
Copy link

You can use the Nacos Configuration Center, which can help you implement encryption for configuration

@linghengqian
Copy link
Member Author

linghengqian commented Sep 19, 2024

You can use the Nacos Configuration Center, which can help you implement encryption for configuration

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants