Skip to content

feat: add support for aes_decrypt expression#3497

Open
rafafrdz wants to merge 15 commits intoapache:mainfrom
rafafrdz:feat/add-support-aes_decrypt
Open

feat: add support for aes_decrypt expression#3497
rafafrdz wants to merge 15 commits intoapache:mainfrom
rafafrdz:feat/add-support-aes_decrypt

Conversation

@rafafrdz
Copy link
Contributor

Summary

  • Added support for Spark aes_decrypt by mapping AesDecrypt to native scalar function aes_decrypt.
  • Added tests for aes_decrypt in CometStringExpressionSuite covering both:
    • default args: aes_decrypt(input, key)
    • explicit args: aes_decrypt(input, key, mode, padding, aad)
  • Updated spark_expressions_support.md to mark aes_decrypt as supported.
    Closes [Feature] Support Spark expression: aes_decrypt #3188

@rafafrdz rafafrdz force-pushed the feat/add-support-aes_decrypt branch from 3b7cc7f to eb318d1 Compare February 13, 2026 13:11
@rafafrdz rafafrdz marked this pull request as draft February 13, 2026 13:26
@rafafrdz rafafrdz marked this pull request as ready for review February 17, 2026 22:47
@andygrove
Copy link
Member

Thanks for the contribution @rafafrdz. I took a quick look and this looks nice. I kicked off CI.

On the testing side, the current tests only cover GCM mode with a 256-bit key. Since the Rust implementation also supports CBC and ECB modes with PKCS padding, and handles 128-bit, 192-bit, and 256-bit keys, it would be great to add test coverage for those combinations.

It might also be worth adding a null input test, maybe inserting a row with null encrypted data and verifying the result is null.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Feature] Support Spark expression: aes_decrypt

2 participants

Comments