Doris Data Encryption (Configuration for Transport Encryption and Storage Encryption)

What is Data Encryption?

Data encryption is a security technology used to protect the confidentiality, integrity, and availability of data.

Transport Encryption

Introduction to Transport Encryption

Transport encryption refers to the use of encryption algorithms and keys to protect data when it is sent from one location to another, preventing unauthorized personnel from viewing or modifying the content of the data.

Transport Encryption Technologies

Doris uses AES-256-CBC (Advanced Encryption Standard with 256-bit key in Cipher Block Chaining mode) for encryption. This algorithm uses a fixed-size key to encrypt data, ensuring it is securely transmitted to the destination.

Storage Encryption

Introduction to Storage Encryption

Storage encryption refers to storing encrypted data in a system, protecting it from unauthorized access.

Storage Encryption Technologies

Doris uses AES-256-CBC for storage encryption. This algorithm uses a fixed-size key to encrypt data, ensuring it is securely stored in the system.

Data Encryption Configuration

Data Encryption Configuration Options

Doris provides the following data encryption configuration options:

data_encryption: Enable or disable transport and storage encryption.
cipher_suite: Specify the encryption algorithm to be used (e.g., AES-256-CBC).
key_size: Specify the key size used by the encryption algorithm (in bits).

Application Scenarios of Data Encryption

Doris's data encryption technology can be used in the following scenarios:

When transmitting sensitive data.
When storing sensitive data.
To protect data security and integrity.