Kryptonite for Kafka Version 0.4.2

Patch Release

• addresses bugs #13 and #16 (see #17)

Kryptonite for Kafka Version 0.4.1

Patch Release

• addresses issue related to multi-threaded usage of kryo during serialization (see #8 #9)

Kryptonite for Kafka Version 0.4.0

1) features:

• brand new http api implemented based on Quarkus Funqy to offer kryptonite integration for languages / runtimes other than Java / JVM
• consistent configuration and integration to support Azure Key Vault for tink keyset storage in all three modules (UDF, SMT, HTTP API)
• consistent configuration and integration to support GCP Cloud KMS Keys for tink keyset encryption in all three modules (UDF, SMT, HTTP API)

2) maintenance:

• major refactoring of all functional tests for UDFs, SMT and HTTP API

3) breaking changes:

• most notably support for the "vanilla crypto" using plain JCE was removed in favor of doing all cryptography operations based on Tink

4) documentation:

• updated all READMEs with details about how to configure / use new features
• funqy-http-api documentation is here

What's Changed

• major refactor of tink integration including kms-based kek support by @hpgrahsl in #5
• add http api for kryptonite by @hpgrahsl in #6
• major tests refactoring by @hpgrahsl in #7

Full Changelog: v0.3.0...v0.4.0

Kryptonite for Kafka Version 0.3.0

1) maintenance:

• updates for all major dependencies across modules
• renaming of selected packages
• add/adapt logging
• commonly used classes are pre-registered for kryo serialization

2) features:

• preliminary ksqlDB UDF support 🚀

3) documentation:

• adapt readme structure due to splitting the documentation into multiple files residing in the respective modules
• write basic documentation for stream processing support based on ksqlDB UDFs
• typos and other little corrections
• update download links to new versions of the pre-built jars

Kryptonite for Kafka Version 0.2.0

1) maintenance:

• restructure / rename mvn module and folders and bump version
• various dependency updates
• further code repackaging and class renaming

2) bug fixes:

• fix wrong config type for kms_config (string -> password)

3) features:

• change key source config and handling for remote / cloud KMS
• add prefetch support to KeyMaterialResolver and AzureKeyVault
• tink keyset is used for implicit key rotation support
• no need for key id in cipherfield smt decrypt config (part of payload meta data)
• azure key vault secrets based on tink keyset json spec
• major overhaul for google tink integration
• rewrite config based on tink keysets in JSON format
• add tink's AES GCM besides the 'native' JCE impl
• add deterministic mode using tink's AEAD AES SIV primitive
• improve functional test of CipherField SMT

4) documentation:

• typos and other little corrections
• mostly doc updates and a few minor changes
• adapt documentation to reflect changes w.r.t. tink integration

Kafka Connect Transform Kryptonite Version 0.1.1

Patch release of Kryptonite

NOTE: this is the last release before a larger code-base refactoring and major improvements including breaking changes

1) bugs fixed:

• null handling of struct type values with element mode for schema-aware records
• respects optional settings in accordance with original schema during schema redaction
• adapt element mode processing in schemaless record handler

2) initial poc support for externalizing keys

• add / adapt config settings for externalizing secret keys
• integrate with azure key vault for retrieving keys as secrets from the cloud during SMT configuration

3) documentation updates

Kafka Connect Transform Kryptonite Version 0.1.0

Initial release of Kryptonite

• it's a turn-key ready transformation (SMT) for Apache Kafka® Connect
• allows for configurable field-level 🔒 encryption/decryption 🔓 of connect records
• supports schemaless and schema-aware connect records