Package | Description |
---|---|
com.amazonaws.encryptionsdk |
Contains
AwsCrypto , the primary entry-point to the Aws
Encryption SDK. |
com.amazonaws.encryptionsdk.internal |
Contains the internal classes that handle the cryptographic defined by the message formats and
algorithms.
|
com.amazonaws.encryptionsdk.jce | |
com.amazonaws.encryptionsdk.kms |
Contains logic necessary to create
MasterKey s backed by AWS
KMS keys. |
com.amazonaws.encryptionsdk.kmssdkv2 |
Contains logic necessary to create
MasterKey s backed by AWS
KMS keys. |
com.amazonaws.encryptionsdk.model |
Contains the classes that implement the defined message format for storing the encrypted content
and the data key.
|
Modifier and Type | Method and Description |
---|---|
static CryptoAlgorithm |
CryptoAlgorithm.deserialize(byte messageFormatVersion,
short value)
Deprecated.
|
CryptoAlgorithm |
CryptoResult.getCryptoAlgorithm()
Convenience method equivalent to
CryptoResult.getHeaders() .getCryptoAlgoId() . |
CryptoAlgorithm |
AwsCrypto.getEncryptionAlgorithm() |
static CryptoAlgorithm |
CryptoAlgorithm.valueOf(String name)
Returns the enum constant of this type with the specified name.
|
static CryptoAlgorithm[] |
CryptoAlgorithm.values()
Returns an array containing the constants of this enum type, in
the order they are declared.
|
Modifier and Type | Method and Description |
---|---|
boolean |
CommitmentPolicy.algorithmAllowedForDecrypt(CryptoAlgorithm algorithm)
Validates that an algorithm meets the Policy's On decrypt key commitment.
|
boolean |
CommitmentPolicy.algorithmAllowedForEncrypt(CryptoAlgorithm algorithm)
Validates that an algorithm meets the Policy's On encrypt key commitment.
|
abstract DataKey<K> |
MasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext)
Iterates through
encryptedDataKeys and returns the first one which can be successfully
decrypted. |
abstract DataKey<K> |
MasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey)
Returns a new copy of the provided
dataKey which is protected by this MasterKey
for use with algorithm and associated with the provided encryptionContext . |
abstract DataKey<K> |
MasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext)
|
void |
AwsCrypto.setEncryptionAlgorithm(CryptoAlgorithm alg)
Sets the
CryptoAlgorithm to use when encrypting data. |
AwsCrypto.Builder |
AwsCrypto.Builder.withEncryptionAlgorithm(CryptoAlgorithm encryptionAlgorithm)
Sets the
CryptoAlgorithm to encrypt with. |
Modifier and Type | Method and Description |
---|---|
abstract boolean |
SignaturePolicy.algorithmAllowedForDecrypt(CryptoAlgorithm algorithm) |
static TrailingSignatureAlgorithm |
TrailingSignatureAlgorithm.forCryptoAlgorithm(CryptoAlgorithm algorithm) |
static CommittedKey |
CommittedKey.generate(CryptoAlgorithm alg,
SecretKey dataKey,
byte[] nonce)
Generates an encryption key along with associated commitment value.
|
Modifier and Type | Method and Description |
---|---|
DataKey<JceMasterKey> |
JceMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<JceMasterKey> |
KeyStoreProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext)
Attempts to decrypts the
encryptedDataKeys by first iterating through all aliasNames specified in the constructor and then over all other compatible keys in
the KeyStore . |
DataKey<JceMasterKey> |
JceMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<JceMasterKey> |
JceMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext) |
Modifier and Type | Method and Description |
---|---|
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<KmsMasterKey> |
KmsMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext)
Will attempt to decrypt if awsKmsArnMatchForDecrypt returns true in
AwsKmsMrkAwareMasterKey#filterEncryptedDataKeys(String, AwsKmsCmkArnInfo, EncryptedDataKey) . |
DataKey<KmsMasterKey> |
KmsMasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<KmsMasterKey> |
KmsMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<KmsMasterKey> |
KmsMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext)
This is identical behavior to
|
Modifier and Type | Method and Description |
---|---|
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<KmsMasterKey> |
KmsMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext)
Will attempt to decrypt if awsKmsArnMatchForDecrypt returns true in
AwsKmsMrkAwareMasterKey.filterEncryptedDataKeys(String, String, EncryptedDataKey) . |
DataKey<KmsMasterKey> |
KmsMasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<KmsMasterKey> |
KmsMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<KmsMasterKey> |
KmsMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext)
This is identical behavior to
|
Modifier and Type | Method and Description |
---|---|
CryptoAlgorithm |
DecryptionMaterialsRequest.getAlgorithm() |
CryptoAlgorithm |
DecryptionMaterialsRequest.Builder.getAlgorithm() |
CryptoAlgorithm |
EncryptionMaterials.getAlgorithm()
The algorithm to use for this encryption operation.
|
CryptoAlgorithm |
EncryptionMaterials.Builder.getAlgorithm() |
CryptoAlgorithm |
CiphertextHeaders.getCryptoAlgoId()
Return the crypto algorithm identifier set in the header.
|
CryptoAlgorithm |
EncryptionMaterialsRequest.getRequestedAlgorithm() |
CryptoAlgorithm |
EncryptionMaterialsRequest.Builder.getRequestedAlgorithm() |
Modifier and Type | Method and Description |
---|---|
DecryptionMaterialsRequest.Builder |
DecryptionMaterialsRequest.Builder.setAlgorithm(CryptoAlgorithm algorithm) |
EncryptionMaterials.Builder |
EncryptionMaterials.Builder.setAlgorithm(CryptoAlgorithm algorithm) |
EncryptionMaterialsRequest.Builder |
EncryptionMaterialsRequest.Builder.setRequestedAlgorithm(CryptoAlgorithm requestedAlgorithm) |
Constructor and Description |
---|
CiphertextHeaders(byte version,
CiphertextType type,
CryptoAlgorithm cryptoAlgo,
byte[] encryptionContext,
List<KeyBlob> keyBlobs,
ContentType contentType,
int frameSize)
|
CiphertextHeaders(CiphertextType type,
CryptoAlgorithm cryptoAlgo,
byte[] encryptionContext,
List<KeyBlob> keyBlobs,
ContentType contentType,
int frameSize)
Construct the ciphertext headers using the provided values.
|
Copyright © 2023. All rights reserved.