Body Armor for Distributed System

Kafka Summit SF 2017 | Pipelines Track

We show a way to make Kafka end-to-end encrypted. It means that data is ever decrypted only at the side of producers and consumers of the data. The data is never decrypted broker-side. Importantly, all Kafka clients have their own encryption keys. There is no pre-shared encryption key. Our approach can be compared to TLS implemented for more than two parties connected together.

	Michael Egorov Co-founder and CTO, NuCypher