-
ranger
Apache Ranger - To enable, monitor and manage comprehensive data security across the Hadoop platform and beyond (by apache)
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
I was just talking to our vendor who produces the cryptographic platform that we use and inquiring about support for encrypting Cloudera databases. We eventually ended up discussing Ranger KMS. In much nicer words, the vendor told us that it was one of the more poorly written cryptographic implementations that they've seen. Some of the things they pointed out are using immutable strings for keys, poor use of the Java keystore interface to limit integrations to particular HSMs, and exporting keys from the HSM instead of using a standard KEK/DEK approach where the KEK remains non-exportable in the HSM.