[MDEV-17266] Document how to determine which Aria tables are encrypted Created: 2018-09-21 Updated: 2018-12-22 Resolved: 2018-12-22 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | Documentation - Support, Encryption, Storage Engine - Aria |
| Fix Version/s: | N/A |
| Type: | Task | Priority: | Major |
| Reporter: | Geoff Montee (Inactive) | Assignee: | Geoff Montee (Inactive) |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Issue Links: |
|
||||||||||||||||||||||||
| Description |
|
You can query information_schema.INNODB_TABLESPACES_ENCRYPTION to determine which InnoDB tables are encrypted: https://mariadb.com/kb/en/library/information-schema-innodb_tablespaces_encryption-table/ Aria tables can also be encrypted if aria_encrypt_tables is enabled: https://mariadb.com/kb/en/library/aria-system-variables/#aria_encrypt_tables However, I can't tell if there is actually any way to determine which Aria tables are encrypted. The only way I've been able to come up with is by finding out which Aria tables use the row_format PAGE:
And then finding some data from a particular table:
And then checking whether you can find some plain text from that data in the data file:
However, it would probably make sense to have an information_schema table that says which Aria tables are encrypted. Also, we should document whether Aria tables are also encrypted/decrypted by InnoDB's background encryption threads (configured by innodb_encryption_threads and innodb_encryption_rotate_key_age) or if they are encrypted/decrypted by some other means. My tests seem to indicate that Aria tables are not encrypted/decrypted by InnoDB's background threads. In fact, it appears that the encryption status of an Aria table depends solely on the value of aria_encrypt_tables at the time that it was created. See |
| Comments |
| Comment by Geoff Montee (Inactive) [ 2018-09-21 ] |
|
jplindst, do you have any feedback on this? |
| Comment by Geoff Montee (Inactive) [ 2018-12-20 ] |
|
https://mariadb.com/kb/en/library/encrypting-data-for-aria/#determining-whether-a-table-is-encrypted |
| Comment by Geoff Montee (Inactive) [ 2018-12-20 ] |
|
Are you familiar with Aria encryption? If so, do the documentation changes look good? https://mariadb.com/kb/en/library/encrypting-data-for-aria/#determining-whether-a-table-is-encrypted |
| Comment by Geoff Montee (Inactive) [ 2018-12-20 ] |
|
serg, I see that you implemented |