minio/cmd/crypto
poornas 5a80cbec2a Add double encryption at S3 gateway. (#6423)
This PR adds pass-through, single encryption at gateway and double
encryption support (gateway encryption with pass through of SSE
headers to backend).

If KMS is set up (either with Vault as KMS or using
MINIO_SSE_MASTER_KEY),gateway will automatically perform
single encryption. If MINIO_GATEWAY_SSE is set up in addition to
Vault KMS, double encryption is performed.When neither KMS nor
MINIO_GATEWAY_SSE is set, do a pass through to backend.

When double encryption is specified, MINIO_GATEWAY_SSE can be set to
"C" for SSE-C encryption at gateway and backend, "S3" for SSE-S3
encryption at gateway/backend or both to support more than one option.

Fixes #6323, #6696
2019-01-05 14:16:42 -08:00
..
config.go add auto-encryption feature (#6523) 2018-12-14 13:35:48 -08:00
doc.go fix object rebinding SSE-C security guarantee violation (#6121) 2018-07-09 17:18:28 -07:00
error.go return Access Denied for invalid SSE keys (#6432) 2018-09-06 12:31:12 -07:00
header_test.go Migrate to Go version 1.11.4 (#7026) 2018-12-28 14:04:39 -08:00
header.go Use GetObjectNInfo in CopyObject and CopyObjectPart (#6489) 2018-09-25 12:39:46 -07:00
key_test.go crypto: add functions for sealing/unsealing the etag for SSE (#6618) 2018-10-16 10:02:19 -07:00
key.go crypto: add functions for sealing/unsealing the etag for SSE (#6618) 2018-10-16 10:02:19 -07:00
kms_test.go crypto: add support for parsing/creating SSE-C/SSE-S3 metadata (#6169) 2018-07-25 13:35:54 -07:00
kms.go crypto: add support for parsing/creating SSE-C/SSE-S3 metadata (#6169) 2018-07-25 13:35:54 -07:00
metadata_test.go Migrate to Go version 1.11.4 (#7026) 2018-12-28 14:04:39 -08:00
metadata.go Add double encryption at S3 gateway. (#6423) 2019-01-05 14:16:42 -08:00
sse_test.go crypto: add helper functions for unsealing object keys (#6609) 2018-10-12 18:06:38 -07:00
sse.go crypto: add helper functions for unsealing object keys (#6609) 2018-10-12 18:06:38 -07:00
vault.go refactor vault configuration and add master-key KMS (#6488) 2018-12-12 12:20:29 +05:30