From 5369cc7d237d02151d5395f9c02332ace65bf338 Mon Sep 17 00:00:00 2001 From: Chris Lu Date: Fri, 6 Mar 2020 09:11:12 -0800 Subject: [PATCH] Updated Filer Data Encryption (markdown) --- Filer-Data-Encryption.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/Filer-Data-Encryption.md b/Filer-Data-Encryption.md index b9eafe4..6d6800d 100644 --- a/Filer-Data-Encryption.md +++ b/Filer-Data-Encryption.md @@ -13,5 +13,10 @@ So the volume data on the volume servers are encrypted and should be safe. As lo ### Safely Forget Data Another side is, with GDPR, companies are required to "forget" customer data after some time. If the volume data is stored on a glacial storage system, it is cumbersome to dig them out and destroy them. It is much easier to just delete the metadata, and the volume data is automatically "destroyed". +### Encryption Algorithm +The encryption is through GCM https://en.wikipedia.org/wiki/Galois/Counter_Mode + +There is one randomly generated cipher key of 256 bits for each file chunk. One file has one or many file chunks. By default the chunk size is 32MB. The cipher code is here https://github.com/chrislusf/seaweedfs/blob/master/weed/util/cipher.go + ### Note The volume servers are agnostic to encryption. There are no encryption if you only use master and volume servers as an object store.