JGroups Protocol ENCRYPT
External
- http://www.jgroups.org/manual/index.html#Security
- https://github.com/belaban/JGroups/blob/master/doc/ENCRYPT.html
Internal
Overview
The ENCRYPT protocol has the role of encrypting messages in transit between JGroups nodes that belong to the same group. Message body data in clear coming down the JGroups stack on the sending node enters the ENCRYPT layer, gets encrypted and travels in encrypted form to all peers in the JGroups group, thus becoming opaque to whoever would monitor the low level traffic on the network. Once inside the receiving node JGroups stack, data is sent up the stack until it reaches the ENCRYPT layer, where it gets decrypted and turned into clear text which then gets sent up the stack.
Encryption Modes
The modes are mutually exclusive, all JGroups members in the group must be configured in the same way.
The shared keystore encryption encrypts all events of a type MSG that have a non-null message buffer. The protocol can be inserted at any position in the stack, and it is not dependent by a coordinator to generate and distribute the key. This is using symmetric encryption with a secret key that is stored in a keystore.
Dynamic Key Generation
TODO