| Package | Description |
|---|---|
| com.amazonaws.encryptionsdk |
Contains
AwsCrypto, the primary entry-point to the Aws
Encryption SDK. |
| com.amazonaws.encryptionsdk.internal |
Contains the internal classes that handle the cryptographic defined by the message formats and
algorithms.
|
| com.amazonaws.encryptionsdk.jce | |
| com.amazonaws.encryptionsdk.kms |
Contains logic necessary to create
MasterKeys backed by AWS
KMS keys. |
| com.amazonaws.encryptionsdk.model |
Contains the classes that implement the defined message format for storing the encrypted content
and the data key.
|
| com.amazonaws.encryptionsdk.multi |
Contains logic necessary to create
MasterKeyProviders which
are backed by multiple MasterKeyProviders. |
| Modifier and Type | Class and Description |
|---|---|
class |
CryptoInputStream<K extends MasterKey<K>>
A CryptoInputStream is a subclass of java.io.InputStream.
|
class |
CryptoOutputStream<K extends MasterKey<K>>
A CryptoOutputStream is a subclass of java.io.OutputStream.
|
class |
CryptoResult<T,K extends MasterKey<K>>
Represents the result of an operation by
AwsCrypto. |
class |
DataKey<M extends MasterKey<M>>
Represents both the cleartext and encrypted bytes of a data key.
|
class |
MasterKey<K extends MasterKey<K>>
Represents the cryptographic key used to protect the
DataKey (which, in turn, protects
the data). |
class |
MasterKeyProvider<K extends MasterKey<K>>
Represents the logic necessary to select and construct
MasterKeys for encrypting and
decrypting messages. |
| Modifier and Type | Method and Description |
|---|---|
<K extends MasterKey<K>> |
AwsCrypto.createDecryptingStream(MasterKeyProvider<K> provider,
InputStream is)
Returns a
CryptoInputStream which decrypts the data after reading it from the
underlying InputStream. |
<K extends MasterKey<K>> |
AwsCrypto.createDecryptingStream(MasterKeyProvider<K> provider,
OutputStream os)
Returns a
CryptoOutputStream which decrypts the data prior to passing it onto the
underlying OutputStream. |
<K extends MasterKey<K>> |
AwsCrypto.createEncryptingStream(MasterKeyProvider<K> provider,
InputStream is)
Returns the equivalent to calling
AwsCrypto.createEncryptingStream(MasterKeyProvider,
InputStream, Map) with an empty encryptionContext. |
<K extends MasterKey<K>> |
AwsCrypto.createEncryptingStream(MasterKeyProvider<K> provider,
InputStream is,
Map<String,String> encryptionContext)
Returns a
CryptoInputStream which encrypts the data after reading it from the
underlying InputStream. |
<K extends MasterKey<K>> |
AwsCrypto.createEncryptingStream(MasterKeyProvider<K> provider,
OutputStream os)
Returns the equivalent to calling
AwsCrypto.createEncryptingStream(MasterKeyProvider,
OutputStream, Map) with an empty encryptionContext. |
<K extends MasterKey<K>> |
AwsCrypto.createEncryptingStream(MasterKeyProvider<K> provider,
OutputStream os,
Map<String,String> encryptionContext)
Returns a
CryptoOutputStream which encrypts the data prior to passing it onto the
underlying OutputStream. |
<K extends MasterKey<K>> |
AwsCrypto.createUnsignedMessageDecryptingStream(MasterKeyProvider<K> provider,
InputStream is)
Returns a
CryptoInputStream which decrypts the data after reading it from the
underlying InputStream. |
<K extends MasterKey<K>> |
AwsCrypto.createUnsignedMessageDecryptingStream(MasterKeyProvider<K> provider,
OutputStream os)
Returns a
CryptoOutputStream which decrypts the data prior to passing it onto the
underlying OutputStream. |
<K extends MasterKey<K>> |
AwsCrypto.decryptData(MasterKeyProvider<K> provider,
byte[] ciphertext)
Decrypts the provided
ciphertext by requesting that the provider unwrap any
usable DataKey in the ciphertext and then decrypts the ciphertext using that DataKey. |
<K extends MasterKey<K>> |
AwsCrypto.decryptData(MasterKeyProvider<K> provider,
ParsedCiphertext ciphertext) |
<K extends MasterKey<K>> |
AwsCrypto.decryptString(MasterKeyProvider<K> provider,
String ciphertext)
Deprecated.
Use the
AwsCrypto.decryptData(MasterKeyProvider, byte[]) and AwsCrypto.encryptData(MasterKeyProvider, byte[], Map) APIs instead. encryptString and
decryptString work as expected if you use them together. However, to work with
other language implementations of the AWS Encryption SDK, you need to base64-decode the
output of encryptString and base64-encode the input to decryptString. These
deprecated APIs will be removed in the future. |
<K extends MasterKey<K>> |
AwsCrypto.encryptData(MasterKeyProvider<K> provider,
byte[] plaintext)
Returns the equivalent to calling
AwsCrypto.encryptData(MasterKeyProvider, byte[], Map) with an
empty encryptionContext. |
<K extends MasterKey<K>> |
AwsCrypto.encryptData(MasterKeyProvider<K> provider,
byte[] plaintext,
Map<String,String> encryptionContext)
Returns an encrypted form of
plaintext that has been protected with DataKeys that are in turn protected by MasterKeys provided by provider. |
<K extends MasterKey<K>> |
AwsCrypto.encryptString(MasterKeyProvider<K> provider,
String plaintext)
Deprecated.
Use the
AwsCrypto.encryptData(MasterKeyProvider, byte[]) and AwsCrypto.decryptData(MasterKeyProvider, byte[]) APIs instead. encryptString and decryptString work as expected if you use them together. However, to work with other
language implementations of the AWS Encryption SDK, you need to base64-decode the output of
encryptString and base64-encode the input to decryptString. These
deprecated APIs will be removed in the future. |
<K extends MasterKey<K>> |
AwsCrypto.encryptString(MasterKeyProvider<K> provider,
String plaintext,
Map<String,String> encryptionContext)
Deprecated.
Use the
AwsCrypto.encryptData(MasterKeyProvider, byte[], Map) and AwsCrypto.decryptData(MasterKeyProvider, byte[]) APIs instead. encryptString and decryptString work as expected if you use them together. However, to work with other
language implementations of the AWS Encryption SDK, you need to base64-decode the output of
encryptString and base64-encode the input to decryptString. These
deprecated APIs will be removed in the future. |
<K extends MasterKey<K>> |
AwsCrypto.estimateCiphertextSize(MasterKeyProvider<K> provider,
int plaintextSize)
Returns the equivalent to calling
AwsCrypto.estimateCiphertextSize(MasterKeyProvider, int, Map)
with an empty encryptionContext. |
<K extends MasterKey<K>> |
AwsCrypto.estimateCiphertextSize(MasterKeyProvider<K> provider,
int plaintextSize,
Map<String,String> encryptionContext)
Returns the best estimate for the output length of encrypting a plaintext with the provided
plaintextSize and encryptionContext. |
| Modifier and Type | Class and Description |
|---|---|
class |
DecryptionHandler<K extends MasterKey<K>>
This class implements the CryptoHandler interface by providing methods for the decryption of
ciphertext produced by the methods in
EncryptionHandler. |
| Modifier and Type | Method and Description |
|---|---|
static <K extends MasterKey<K>> |
DecryptionHandler.create(MasterKeyProvider<K> customerMasterKeyProvider,
CiphertextHeaders headers,
CommitmentPolicy commitmentPolicy,
SignaturePolicy signaturePolicy,
int maxEncryptedDataKeys)
Deprecated.
This version may have to recalculate the number of bytes already parsed, which adds
a performance penalty. Use
DecryptionHandler.create(CryptoMaterialsManager, ParsedCiphertext,
CommitmentPolicy, SignaturePolicy, int) instead, which makes the parsed byte count
directly available instead. |
static <K extends MasterKey<K>> |
DecryptionHandler.create(MasterKeyProvider<K> customerMasterKeyProvider,
CommitmentPolicy commitmentPolicy,
SignaturePolicy signaturePolicy,
int maxEncryptedDataKeys)
Create a decryption handler using the provided master key.
|
static <K extends MasterKey<K>> |
DecryptionHandler.create(MasterKeyProvider<K> customerMasterKeyProvider,
ParsedCiphertext headers,
CommitmentPolicy commitmentPolicy,
SignaturePolicy signaturePolicy,
int maxEncryptedDataKeys)
Create a decryption handler using the provided master key and already parsed
headers. |
| Modifier and Type | Method and Description |
|---|---|
List<? extends MasterKey<?>> |
LazyMessageCryptoHandler.getMasterKeys() |
List<? extends MasterKey<?>> |
EncryptionHandler.getMasterKeys() |
List<? extends MasterKey<?>> |
MessageCryptoHandler.getMasterKeys()
All used
MasterKeys. |
| Modifier and Type | Class and Description |
|---|---|
class |
JceMasterKey
|
| Modifier and Type | Class and Description |
|---|---|
class |
AwsKmsMrkAwareMasterKey
Represents a single Aws KMS key and is used to encrypt/decrypt data with
AwsCrypto. |
class |
KmsMasterKey
Represents a single Customer Master Key (CMK) and is used to encrypt/decrypt data with
AwsCrypto. |
| Modifier and Type | Method and Description |
|---|---|
List<MasterKey> |
EncryptionMaterials.getMasterKeys()
Contains a list of all MasterKeys that could decrypt this message.
|
List<MasterKey> |
EncryptionMaterials.Builder.getMasterKeys() |
| Modifier and Type | Method and Description |
|---|---|
EncryptionMaterials.Builder |
EncryptionMaterials.Builder.setMasterKeys(List<MasterKey> masterKeys) |
| Modifier and Type | Method and Description |
|---|---|
static <K extends MasterKey<K>> |
MultipleProviderFactory.buildMultiProvider(Class<K> masterKeyClass,
List<? extends MasterKeyProvider<? extends K>> providers) |
static <K extends MasterKey<K>,P extends MasterKeyProvider<? extends K>> |
MultipleProviderFactory.buildMultiProvider(Class<K> masterKeyClass,
P... providers) |
Copyright © 2023. All rights reserved.