AES key rollover

[Cantor, Scott]

This is checked in now. I built a new command line tool / bean that will
maintain the keystore and key version files. When it runs, it adds a new
AES key, increments the key version property in a second file, and deletes
older keys over a certain number to save.

The DataSealer strategy class polls the version file and updates its
default key every so often, so something like a cron job + rsync should
allow the key to be changed daily without any hands on involvement.

-- Scott

On 7/24/14, 12:42 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>There's some limited support now in the DataSealer class for handling key
>rollver of the symmetric encryption key used for stateless clustering
>features, but I need to operationalize it.