Management of and persistent storage for nodes in a secure cluster

A system comprising:

• a memory;
• and
• a processing device, operatively coupled with the memory, to:
• provide a request for encrypted data stored at a storage resource;
• receive the encrypted data;
• identify authentication information at a first portion of the received encrypted data;
• derive a cryptographic key based on a combination of an identification of the first portion of the received encrypted data and a master key;
• generate additional authentication information based on a combination of the derived cryptographic key and another portion of the received encrypted data;
• verify the received encrypted data by comparing the authentication information at the first portion of the received encrypted data with the generated additional authentication information;
• in response to verifying the received encrypted data, derive a second cryptographic key based on a combination of an identification of the another portion of the received encrypted data and the same master key used to derive the cryptographic key;
• and
• decrypt the another portion of the received encrypted data by using the second cryptographic key.

A non-transitory computer readable medium comprising data that, when accessed by a processing device, cause the processing device to perform operations comprising:

• providing a request for encrypted data stored at a storage resource;
• receiving the encrypted data;
• identifying authentication information at a first portion of the received encrypted data;
• deriving a cryptographic key based on a combination of an identification of the first portion of the received encrypted data and a master key;
• generating, by the processing device, additional authentication information based on a combination of the derived cryptographic key and another portion of the received encrypted data;
• verifying the received encrypted data by comparing the authentication information at the first portion of the received encrypted data with the generated additional authentication information;
• in response to verifying the received encrypted data, deriving a second cryptographic key based on a combination of an identification of the another portion of the received encrypted data and the same master key used to derive the cryptographic key;
• and
• decrypting the another portion of the received encrypted data by using the second cryptographic key.