FM / encryption

/usr/local/lib64/python3.6/site-packages/pyarrow/include/parquet/encryption/

/usr/local/lib64/python3.6/site-packages/pyarrow/include/parquet/encryption

Name	Size	Mode	Actions
crypto_factory.h	5777	0644	edit dl rm
encryption.h	19652	0644	edit dl rm
file_key_material_store.h	1289	0644	edit dl rm
file_key_unwrapper.h	2919	0644	edit dl rm
file_key_wrapper.h	3567	0644	edit dl rm
key_encryption_key.h	2258	0644	edit dl rm
key_material.h	6247	0644	edit dl rm
key_metadata.h	4067	0644	edit dl rm
key_toolkit.h	2986	0644	edit dl rm
kms_client.h	3174	0644	edit dl rm
kms_client_factory.h	1319	0644	edit dl rm
local_wrap_kms_client.h	3980	0644	edit dl rm
test_encryption_util.h	4439	0644	edit dl rm
test_in_memory_kms.h	3207	0644	edit dl rm
two_level_cache_with_expiration.h	5101	0644	edit dl rm

Edit: /usr/local/lib64/python3.6/site-packages/pyarrow/include/parquet/encryption/key_toolkit.h (2986B)

// Licensed to the Apache Software Foundation (ASF) under one
// or more contributor license agreements.  See the NOTICE file
// distributed with this work for additional information
// regarding copyright ownership.  The ASF licenses this file
// to you under the Apache License, Version 2.0 (the
// "License"); you may not use this file except in compliance
// with the License.  You may obtain a copy of the License at
//
//   http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing,
// software distributed under the License is distributed on an
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
// KIND, either express or implied.  See the License for the
// specific language governing permissions and limitations
// under the License.

#pragma once

#include <memory>
#include <string>

#include "parquet/encryption/key_encryption_key.h"
#include "parquet/encryption/kms_client.h"
#include "parquet/encryption/kms_client_factory.h"
#include "parquet/encryption/two_level_cache_with_expiration.h"
#include "parquet/platform.h"

namespace parquet {
namespace encryption {

// KeyToolkit is a utility that keeps various tools for key management (such as key
// rotation, kms client instantiation, cache control, etc), plus a number of auxiliary
// classes for internal use.
class PARQUET_EXPORT KeyToolkit {
 public:
  /// KMS client two level cache: token -> KMSInstanceId -> KmsClient
  TwoLevelCacheWithExpiration<std::shared_ptr<KmsClient>>& kms_client_cache_per_token() {
    return kms_client_cache_;
  }
  /// Key encryption key two level cache for wrapping: token -> MasterEncryptionKeyId ->
  /// KeyEncryptionKey
  TwoLevelCacheWithExpiration<KeyEncryptionKey>& kek_write_cache_per_token() {
    return key_encryption_key_write_cache_;
  }

/// Key encryption key two level cache for unwrapping: token -> KeyEncryptionKeyId ->
  /// KeyEncryptionKeyBytes
  TwoLevelCacheWithExpiration<std::string>& kek_read_cache_per_token() {
    return key_encryption_key_read_cache_;
  }

std::shared_ptr<KmsClient> GetKmsClient(
      const KmsConnectionConfig& kms_connection_config, double cache_entry_lifetime_ms);

/// Flush any caches that are tied to the (compromised) access_token
  void RemoveCacheEntriesForToken(const std::string& access_token);

void RemoveCacheEntriesForAllTokens();

void RegisterKmsClientFactory(std::shared_ptr<KmsClientFactory> kms_client_factory) {
    if (kms_client_factory_ != NULL) {
      throw ParquetException("KMS client factory has already been registered.");
    }
    kms_client_factory_ = kms_client_factory;
  }

private:
  TwoLevelCacheWithExpiration<std::shared_ptr<KmsClient>> kms_client_cache_;
  TwoLevelCacheWithExpiration<KeyEncryptionKey> key_encryption_key_write_cache_;
  TwoLevelCacheWithExpiration<std::string> key_encryption_key_read_cache_;
  std::shared_ptr<KmsClientFactory> kms_client_factory_;
};

}  // namespace encryption
}  // namespace parquet

cmd: