HADOOP-19667: Clarify constraints for hadoop.security.crypto.buffer.size (min=512; floor to cipher block size)

zzz0706 · zzz0706 · commit ce5422f5a269 · 2025-08-27T20:30:23.000+08:00
diff --git a/hadoop-hdfs-project/hadoop-hdfs/src/site/markdown/TransparentEncryption.md b/hadoop-hdfs-project/hadoop-hdfs/src/site/markdown/TransparentEncryption.md
@@ -133,7 +133,7 @@ The JCE provider name used in CryptoCodec.
 
 Default: `8192`
 
-The buffer size used by CryptoInputStream and CryptoOutputStream.
+The buffer size used by CryptoInputStream and CryptoOutputStream. Minimum is 512 bytes; the effective value is floored to the nearest multiple of the cipher algorithm block size.
 
 ### Namenode configuration
 
