KIP-395 — Encypt-then-MAC Delegation token metadata

Discussion Security

Proposes switching delegation token metadata serialization to use Encrypt-then-MAC (AES-CBC + HMAC) rather than storing plaintext token metadata in ZooKeeper. Delegation token metadata stored in ZooKeeper is readable by anyone with ZK access; an authenticated encryption scheme ensures confidentiality and integrity of token information at rest.

Details