| Package | Description |
|---|---|
| com.amazonaws.encryptionsdk |
Contains
AwsCrypto, the primary entry-point to the Aws
Encryption SDK. |
| com.amazonaws.encryptionsdk.jce | |
| com.amazonaws.encryptionsdk.kms |
Contains logic necessary to create
MasterKeys backed by AWS
KMS keys. |
| com.amazonaws.encryptionsdk.kmssdkv2 |
Contains logic necessary to create
MasterKeys backed by AWS
KMS keys. |
| com.amazonaws.encryptionsdk.model |
Contains the classes that implement the defined message format for storing the encrypted content
and the data key.
|
| Modifier and Type | Method and Description |
|---|---|
abstract DataKey<K> |
MasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext)
Iterates through
encryptedDataKeys and returns the first one which can be successfully
decrypted. |
abstract DataKey<K> |
MasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey)
Returns a new copy of the provided
dataKey which is protected by this MasterKey
for use with algorithm and associated with the provided encryptionContext. |
abstract DataKey<K> |
MasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext)
|
| Modifier and Type | Method and Description |
|---|---|
abstract DataKey<K> |
MasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey)
Returns a new copy of the provided
dataKey which is protected by this MasterKey
for use with algorithm and associated with the provided encryptionContext. |
| Modifier and Type | Method and Description |
|---|---|
DataKey<JceMasterKey> |
JceMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<JceMasterKey> |
KeyStoreProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext)
Attempts to decrypts the
encryptedDataKeys by first iterating through all aliasNames specified in the constructor and then over all other compatible keys in
the KeyStore. |
DataKey<JceMasterKey> |
JceMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<JceMasterKey> |
JceMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext) |
| Modifier and Type | Method and Description |
|---|---|
DataKey<JceMasterKey> |
JceMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
| Modifier and Type | Method and Description |
|---|---|
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<KmsMasterKey> |
KmsMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext)
Will attempt to decrypt if awsKmsArnMatchForDecrypt returns true in
AwsKmsMrkAwareMasterKey#filterEncryptedDataKeys(String, AwsKmsCmkArnInfo, EncryptedDataKey). |
DataKey<KmsMasterKey> |
KmsMasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<KmsMasterKey> |
KmsMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<KmsMasterKey> |
KmsMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext)
This is identical behavior to
|
| Modifier and Type | Method and Description |
|---|---|
DataKey<KmsMasterKey> |
KmsMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
| Modifier and Type | Method and Description |
|---|---|
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<KmsMasterKey> |
KmsMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext)
Will attempt to decrypt if awsKmsArnMatchForDecrypt returns true in
AwsKmsMrkAwareMasterKey.filterEncryptedDataKeys(String, String, EncryptedDataKey). |
DataKey<KmsMasterKey> |
KmsMasterKeyProvider.decryptDataKey(CryptoAlgorithm algorithm,
Collection<? extends EncryptedDataKey> encryptedDataKeys,
Map<String,String> encryptionContext) |
DataKey<KmsMasterKey> |
KmsMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<KmsMasterKey> |
KmsMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.generateDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext)
This is identical behavior to
|
| Modifier and Type | Method and Description |
|---|---|
DataKey<KmsMasterKey> |
KmsMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
DataKey<AwsKmsMrkAwareMasterKey> |
AwsKmsMrkAwareMasterKey.encryptDataKey(CryptoAlgorithm algorithm,
Map<String,String> encryptionContext,
DataKey<?> dataKey) |
| Modifier and Type | Method and Description |
|---|---|
DataKey<?> |
DecryptionMaterials.getDataKey() |
DataKey<?> |
DecryptionMaterials.Builder.getDataKey() |
| Modifier and Type | Method and Description |
|---|---|
DecryptionMaterials.Builder |
DecryptionMaterials.Builder.setDataKey(DataKey<?> dataKey) |
Copyright © 2023. All rights reserved.