Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Design doc: Add support for satellite-managed encryption passphrases #6620

Closed
Tracked by #94
mobyvb opened this issue Dec 20, 2023 · 2 comments
Closed
Tracked by #94

Design doc: Add support for satellite-managed encryption passphrases #6620

mobyvb opened this issue Dec 20, 2023 · 2 comments
Assignees
Labels
Design Doc Adding or updating a design document. needs discussion

Comments

@mobyvb
Copy link
Member

mobyvb commented Dec 20, 2023

We have users who are interested in using distributed storage, but may not be interested in saving and managing their own encryption passphrases.

Goal: make it possible for a newly-created project to store necessary encryption credentials in the satellite database, so that user never needs to enter an encryption passphrase when creating an access grant, setting up uplink, viewing files in the satellite UI, etc...

  • This may require a backwards-incompatible uplink change, which needs to be discussed
  • the satellite UI will need to be updated so that user is not unnecessarily/incorrectly prompted for passphrase if a project was created in this way
  • files are still stored the same way from a metainfo/storagenode perspective. The only difference is that the satellite is capable of deriving the encryption key from the DB, rather than requiring the user to provide a passphrase.

AC:

  • write a brief overview of the necessary work to implement the above, with focus on:
    • satellite database schema updates that are necessary
    • how and where encryption passphrase should be derived if project is set as "satellite-managed" (uplink vs. satellite?)
    • how will uplink backwards compatibility be affected if we make this change?
  • cc @ferristocrat when it is ready for code review
  • it should also be reviewed by:
    • two engineers on the Console team
    • one representative from the Satellite team
    • one representative from the Delivery team
@mobyvb mobyvb added Needs Estimation Issue still needs story pointing Needs Grooming labels Dec 20, 2023
@mobyvb mobyvb added Design Doc Adding or updating a design document. needs discussion and removed Needs Grooming labels Jan 10, 2024
@mobyvb mobyvb self-assigned this Jan 10, 2024
@mobyvb
Copy link
Member Author

mobyvb commented Jan 10, 2024

TODO: link to designs and roadmap items
storj/roadmap#94

@storjrobot
Copy link

This issue has been mentioned on Storj Community Forum (official). There might be relevant details there:

https://forum.storj.io/t/how-to-avoid-edited-tag-in-posts/25050/17

@wilfred-asomanii wilfred-asomanii self-assigned this Feb 8, 2024
@mobyvb mobyvb changed the title Add support for satellite-managed encryption passphrases Design doc: Add support for satellite-managed encryption passphrases Mar 8, 2024
@mobyvb mobyvb closed this as completed Apr 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Design Doc Adding or updating a design document. needs discussion
Projects
None yet
Development

No branches or pull requests

4 participants