Class InMemoryKeystore

java/core/src/java/org/apache/orc/InMemoryKeystore.java:57–333

This is an in-memory implementation of KeyProvider. The primary use of this class is for when the user doesn't have a Hadoop KMS running and wishes to use encryption. It is also useful for testing. The local keys for this class are encrypted/decrypted using the cipher in CBC/NoPaddin

 * This class is not thread safe.
 */
public class InMemoryKeystore implements KeyProvider {
  /**
   * Support AES 256 ?
   */
  public static final boolean SUPPORTS_AES_256;

  static {
    try {
      SUPPORTS_AES_256 = Cipher.getMaxAllowedKeyLength("AES") >= 256;
    } catch (final NoSuchAlgorithmException e) {
      throw new IllegalArgumentException("Unknown algorithm", e);
    }
  }

  private final Random random;

  /**
   * A map that stores the 'keyName@version'
   * and 'metadata + material' mapping.
   */
  private final TreeMap<String, KeyVersion> keys = new TreeMap<>();

  /**
   * A map from the keyName (without version) to the currentVersion.
   */
  private final Map<String, Integer> currentVersion = new HashMap<>();

  /**
   * Create a new InMemoryKeystore.
   */
  public InMemoryKeystore() {
    this(new SecureRandom());
  }

  /**
   * Create an InMemoryKeystore with the given random generator.
   * Except for testing, this must be a SecureRandom.
   */
  public InMemoryKeystore(Random random) {
    this.random = random;
  }

  /**
   * Build a version string from a basename and version number. Converts
   * "/aaa/bbb" and 3 to "/aaa/bbb@3".
   *
   * @param name    the basename of the key
   * @param version the version of the key
   * @return the versionName of the key.
   */
  private static String buildVersionName(final String name,
      final int version) {
    return name + "@" + version;
  }

  /**
   * Get the list of key names from the key provider.
   *