Presented at Kafka Summit SF 2017 by Michael Egorov, NuCypher

1. Body Armor for Distributed Systems

2. Kafka state of encryption
TLS + encryption at rest
2BODY ARMOR FOR DISTRIBUTED SYSTEMS

3. Kafka state of encryption
Encrypt messages before Kafka
3BODY ARMOR FOR DISTRIBUTED SYSTEMS

4. NuCypher Proxy Re-Encryption (PRE)
Secure Sharing & Cryptographic Access Controls
PRE is scalable for N-to-N communication, with
arbitrary numbers of data producers and consumers
Embeds access policies directly into encryption for
ubiquitous data protection
Ideal for secure data sharing, a core functionality of
distributed systems
4BODY ARMOR FOR DISTRIBUTED SYSTEMS

5. Proxy Re-Encryption (PRE)
Main Actors and Interactions
5BODY ARMOR FOR DISTRIBUTED SYSTEMS

6. Proxy re-encryption DEMO

7. Proxy Re-Encryption (PRE)
Hybrid Cryptosystem Encryption Flow
7BODY ARMOR FOR DISTRIBUTED SYSTEMS

8. Re-encryption for Kafka
8BODY ARMOR FOR DISTRIBUTED SYSTEMS

9. Encrypted Kafka DEMO

10. Granular encryption
10BODY ARMOR FOR DISTRIBUTED SYSTEMS

11. Granular encryption DEMO

12. Performance
Encrypting full messages
12BODY ARMOR FOR DISTRIBUTED SYSTEMS

13. Performance
Granular encryption for JSON
13BODY ARMOR FOR DISTRIBUTED SYSTEMS

14. Performance
Granular encryption for Avro
14BODY ARMOR FOR DISTRIBUTED SYSTEMS

15. Data Sharing & Shared Data Lakes
Enables shared, cross-organization data networks
Enrich and connect proprietary data with other data
sets
Access and process in a centrally administered,
shared data lake
Customer retains control and visibility over their data
15BODY ARMOR FOR DISTRIBUTED SYSTEMS

16. Data Sharing & Shared Data Lakes (cont’d)
Everyone brings their own keys (BYOK)
Data owners retain control/visibility over their data
Blind administrator has no golden key or access to
the plaintext data
Easily grant/revoke data access to other participants
16BODY ARMOR FOR DISTRIBUTED SYSTEMS

17. Michael Egorov
Cofounder and CTO
https://github.com/nucypher/kafka-as-module-oss
michael@nucypher.com
Body Armor for Distributed Systems