{"id":2941,"date":"2014-06-11T01:32:24","date_gmt":"2014-06-11T06:32:24","guid":{"rendered":"http:\/\/www.bytebot.net\/blog\/?p=2941"},"modified":"2014-06-11T01:32:24","modified_gmt":"2014-06-11T06:32:24","slug":"on-diskblock-level-encryption-for-mariadb","status":"publish","type":"post","link":"http:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb","title":{"rendered":"On-disk\/block-level encryption for MariaDB"},"content":{"rendered":"<p>I don\u2019t normally quote The Register, but I was clearing tabs and found this article:\u00a0<a href=\"http:\/\/www.theregister.co.uk\/2014\/05\/21\/got_privileged_users_three_hundred_and_fifty_dbas_just_stare_blankly\/\">350 DBAs stare blankly when reminded super-users can pinch data<\/a>. It is an interesting read, telling you that there are many Snowden\u2019s in waiting, possibly even in your organisation.\u00a0<\/p>\n<p>From a MariaDB standpoint, you probably already <a href=\"http:\/\/monty-says.blogspot.com\/2014\/05\/for-your-eyes-only-or-adding-better.html\">read<\/a> that column level encryption as well as block level encryption for some storage engines are likely to come to MariaBD 10.1 via a solution by <a href=\"http:\/\/eperi.de\/en\/problems-we-solve\/database-encryption\/\">Eperi<\/a>. However with some recent breaking news, Google is also likely to do this &#8211; see this thread about\u00a0<a href=\"https:\/\/lists.launchpad.net\/maria-discuss\/msg01668.html\">MariaDB encryption<\/a> on maria-discuss.\u00a0<\/p>\n<p>Google has already developed on-disk\/block-level encryption for InnoDB, Aria (for temporary tables), binary logs and temporary files. The code isn\u2019t published yet, but will likely happen soon, so clear benefits of open source development principles.\u00a0<\/p>\n<p>Elsewhere, if you\u2019re trying to ensure good policies for users, don\u2019t forget to start with the <a href=\"https:\/\/mariadb.com\/kb\/en\/about-the-mariadb-audit-plugin\/\">audit plugin<\/a>\u00a0and <a href=\"https:\/\/mariadb.com\/kb\/en\/roles\/\">roles<\/a>.<\/p>\n<div class=\"sharedaddy sd-sharing-enabled\"><div class=\"robots-nocontent sd-block sd-social sd-social-icon-text sd-sharing\"><h3 class=\"sd-title\">Share this:<\/h3><div class=\"sd-content\"><ul><li class=\"share-email\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-email sd-button share-icon\" href=\"mailto:?subject=%5BShared%20Post%5D%20On-disk%2Fblock-level%20encryption%20for%20MariaDB&body=http%3A%2F%2Fwww.bytebot.net%2Fblog%2Farchives%2F2014%2F06%2F11%2Fon-diskblock-level-encryption-for-mariadb&share=email\" target=\"_blank\" title=\"Click to email a link to a friend\" data-email-share-error-title=\"Do you have email set up?\" data-email-share-error-text=\"If you&#039;re having problems sharing via email, you might not have email set up for your browser. You may need to create a new email yourself.\" data-email-share-nonce=\"7b311b610c\" data-email-share-track-url=\"http:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb?share=email\"><span>Email<\/span><\/a><\/li><li class=\"share-facebook\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-facebook-2941\" class=\"share-facebook sd-button share-icon\" href=\"http:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb?share=facebook\" target=\"_blank\" title=\"Click to share on Facebook\" ><span>Facebook<\/span><\/a><\/li><li class=\"share-linkedin\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-linkedin-2941\" class=\"share-linkedin sd-button share-icon\" href=\"http:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb?share=linkedin\" target=\"_blank\" title=\"Click to share on LinkedIn\" ><span>LinkedIn<\/span><\/a><\/li><li class=\"share-twitter\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-twitter-2941\" class=\"share-twitter sd-button share-icon\" href=\"http:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb?share=twitter\" target=\"_blank\" title=\"Click to share on Twitter\" ><span>Twitter<\/span><\/a><\/li><li class=\"share-end\"><\/li><\/ul><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>I don\u2019t normally quote The Register, but I was clearing tabs and found this article:\u00a0350 DBAs stare blankly when reminded super-users can pinch data. It is an interesting read, telling you that there are many Snowden\u2019s in waiting, possibly even in your organisation.\u00a0 From a MariaDB standpoint, you probably already read that column level encryption [&hellip;]<\/p>\n<div class=\"sharedaddy sd-sharing-enabled\"><div class=\"robots-nocontent sd-block sd-social sd-social-icon-text sd-sharing\"><h3 class=\"sd-title\">Share this:<\/h3><div class=\"sd-content\"><ul><li class=\"share-email\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-email sd-button share-icon\" href=\"mailto:?subject=%5BShared%20Post%5D%20On-disk%2Fblock-level%20encryption%20for%20MariaDB&body=http%3A%2F%2Fwww.bytebot.net%2Fblog%2Farchives%2F2014%2F06%2F11%2Fon-diskblock-level-encryption-for-mariadb&share=email\" target=\"_blank\" title=\"Click to email a link to a friend\" data-email-share-error-title=\"Do you have email set up?\" data-email-share-error-text=\"If you&#039;re having problems sharing via email, you might not have email set up for your browser. You may need to create a new email yourself.\" data-email-share-nonce=\"7b311b610c\" data-email-share-track-url=\"http:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb?share=email\"><span>Email<\/span><\/a><\/li><li class=\"share-facebook\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-facebook-2941\" class=\"share-facebook sd-button share-icon\" href=\"http:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb?share=facebook\" target=\"_blank\" title=\"Click to share on Facebook\" ><span>Facebook<\/span><\/a><\/li><li class=\"share-linkedin\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-linkedin-2941\" class=\"share-linkedin sd-button share-icon\" href=\"http:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb?share=linkedin\" target=\"_blank\" title=\"Click to share on LinkedIn\" ><span>LinkedIn<\/span><\/a><\/li><li class=\"share-twitter\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-twitter-2941\" class=\"share-twitter sd-button share-icon\" href=\"http:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb?share=twitter\" target=\"_blank\" title=\"Click to share on Twitter\" ><span>Twitter<\/span><\/a><\/li><li class=\"share-end\"><\/li><\/ul><\/div><\/div><\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_options":[]},"categories":[1064,23],"tags":[1673,68],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p4vJD-Lr","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":3199,"url":"http:\/\/www.bytebot.net\/blog\/archives\/2016\/04\/08\/tweet-summary-of-percona-live-2015","url_meta":{"origin":2941,"position":0},"title":"(tweet) Summary of Percona Live 2015","date":"8\/4\/2016","format":false,"excerpt":"The problem with Twitter is that we talk about something and before you know it, people forget. (e.g. does WebScaleSQL have an async client library?) How many blog posts are there about Percona Live Santa Clara 2015? This time (2016), I'm going to endeavour to write more than to just\u2026","rel":"","context":"In &quot;MySQL&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3134,"url":"http:\/\/www.bytebot.net\/blog\/archives\/2015\/11\/29\/voting-for-the-percona-live-data-performance-conference-2016","url_meta":{"origin":2941,"position":1},"title":"Voting for talks at the Percona Live Data Performance Conference 2016","date":"29\/11\/2015","format":false,"excerpt":"So this year the Percona Live conference has a new name \u2013 it is the \u201cData Performance Conference\u201d (presumably for a much broader appeal and the fact that Percona is now in the MongoDB world as well). And the next new thing to note? You have to go through a\u2026","rel":"","context":"In &quot;MariaDB&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3084,"url":"http:\/\/www.bytebot.net\/blog\/archives\/2015\/07\/08\/perconalive-amsterdam-schedule-now-out","url_meta":{"origin":2941,"position":2},"title":"#PerconaLive Amsterdam &#8211; schedule now out","date":"8\/7\/2015","format":false,"excerpt":"The schedule is out for Percona Live Europe: Amsterdam\u00a0(September 21-23 2015), and you can see it at: https:\/\/www.percona.com\/live\/europe-amsterdam-2015\/program. From MariaDB Corporation\/Foundation, we have 1 tutorial: Best Practices for MySQL High Availability - Colin Charles (MariaDB) And 5 talks: Using Docker for Fast and Easy Testing of MariaDB and MaxScale -\u2026","rel":"","context":"In &quot;MariaDB&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3117,"url":"http:\/\/www.bytebot.net\/blog\/archives\/2015\/10\/24\/mysql-nl-community-meetup-with-mariadb-speakers-summary","url_meta":{"origin":2941,"position":3},"title":"MySQL NL Community Meetup with MariaDB speakers summary","date":"24\/10\/2015","format":false,"excerpt":"Last week we had the\u00a0MySQL Meetup with MariaDB Developers in\u00a0Amsterdam, which went on easily for about 3.5 hours. Thanks to all for listening (these were lightning talks, not with a strict 5 minute clock with Q&A thrown in), and Dani\u00c3\u00abl\u00a0van Eeden for organising this at the eBay offices (whom kindly\u2026","rel":"","context":"In &quot;MariaDB&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3211,"url":"http:\/\/www.bytebot.net\/blog\/archives\/2016\/04\/14\/mariadb-berlin-meetup-notes-slides","url_meta":{"origin":2941,"position":4},"title":"MariaDB Berlin Meetup Notes &#038; Slides","date":"14\/4\/2016","format":false,"excerpt":"We had the first MariaDB Berlin Meetup on Tuesday 12.04.2016 at the Wikimedia Berlin offices at 7pm. More or less there were over 54 people that attended the event, a mix of MariaDB Corporation employees and community members. We competed with the entertainment at the AWS Summit Berlin which was\u2026","rel":"","context":"In &quot;MariaDB&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2836,"url":"http:\/\/www.bytebot.net\/blog\/archives\/2013\/12\/01\/mariadb-related-links-in-november-2013","url_meta":{"origin":2941,"position":5},"title":"MariaDB-related links in November 2013","date":"1\/12\/2013","format":false,"excerpt":"Another month has come to an end. If you're looking to be updated on MariaDB content on a regular basis, don't forget to be on Twitter (@mariadb), Facebook (MariaDB.dbms), or Google Plus (+mariadb). There was a question on Quora - Is Facebook considering ditching MySQL in favor of MariaDB like\u2026","rel":"","context":"In &quot;MariaDB&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"amp_enabled":true,"_links":{"self":[{"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts\/2941"}],"collection":[{"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/comments?post=2941"}],"version-history":[{"count":1,"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts\/2941\/revisions"}],"predecessor-version":[{"id":2942,"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts\/2941\/revisions\/2942"}],"wp:attachment":[{"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/media?parent=2941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/categories?post=2941"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/tags?post=2941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}