Package | Description |
---|---|
com.amazonaws.encryptionsdk |
Contains
AwsCrypto , the primary entry-point to the Aws
Encryption SDK. |
com.amazonaws.encryptionsdk.caching | |
com.amazonaws.encryptionsdk.internal |
Contains the internal classes that handle the cryptographic defined by the message formats and
algorithms.
|
com.amazonaws.encryptionsdk.jce | |
com.amazonaws.encryptionsdk.kms |
Contains logic necessary to create
MasterKey s backed by AWS
KMS keys. |
com.amazonaws.encryptionsdk.multi |
Contains logic necessary to create
MasterKeyProvider s which
are backed by multiple MasterKeyProviders . |
Modifier and Type | Class and Description |
---|---|
class |
MasterKey<K extends MasterKey<K>>
Represents the cryptographic key used to protect the
DataKey (which, in turn, protects
the data). |
Modifier and Type | Method and Description |
---|---|
<K extends MasterKey<K>> |
AwsCrypto.createDecryptingStream(MasterKeyProvider<K> provider,
InputStream is)
Returns a
CryptoInputStream which decrypts the data after reading it from the
underlying InputStream . |
<K extends MasterKey<K>> |
AwsCrypto.createDecryptingStream(MasterKeyProvider<K> provider,
OutputStream os)
Returns a
CryptoOutputStream which decrypts the data prior to passing it onto the
underlying OutputStream . |
<K extends MasterKey<K>> |
AwsCrypto.createEncryptingStream(MasterKeyProvider<K> provider,
InputStream is)
Returns the equivalent to calling
AwsCrypto.createEncryptingStream(MasterKeyProvider,
InputStream, Map) with an empty encryptionContext . |
<K extends MasterKey<K>> |
AwsCrypto.createEncryptingStream(MasterKeyProvider<K> provider,
InputStream is,
Map<String,String> encryptionContext)
Returns a
CryptoInputStream which encrypts the data after reading it from the
underlying InputStream . |
<K extends MasterKey<K>> |
AwsCrypto.createEncryptingStream(MasterKeyProvider<K> provider,
OutputStream os)
Returns the equivalent to calling
AwsCrypto.createEncryptingStream(MasterKeyProvider,
OutputStream, Map) with an empty encryptionContext . |
<K extends MasterKey<K>> |
AwsCrypto.createEncryptingStream(MasterKeyProvider<K> provider,
OutputStream os,
Map<String,String> encryptionContext)
Returns a
CryptoOutputStream which encrypts the data prior to passing it onto the
underlying OutputStream . |
<K extends MasterKey<K>> |
AwsCrypto.createUnsignedMessageDecryptingStream(MasterKeyProvider<K> provider,
InputStream is)
Returns a
CryptoInputStream which decrypts the data after reading it from the
underlying InputStream . |
<K extends MasterKey<K>> |
AwsCrypto.createUnsignedMessageDecryptingStream(MasterKeyProvider<K> provider,
OutputStream os)
Returns a
CryptoOutputStream which decrypts the data prior to passing it onto the
underlying OutputStream . |
<K extends MasterKey<K>> |
AwsCrypto.decryptData(MasterKeyProvider<K> provider,
byte[] ciphertext)
Decrypts the provided
ciphertext by requesting that the provider unwrap any
usable DataKey in the ciphertext and then decrypts the ciphertext using that DataKey . |
<K extends MasterKey<K>> |
AwsCrypto.decryptData(MasterKeyProvider<K> provider,
ParsedCiphertext ciphertext) |
<K extends MasterKey<K>> |
AwsCrypto.decryptString(MasterKeyProvider<K> provider,
String ciphertext)
Deprecated.
Use the
AwsCrypto.decryptData(MasterKeyProvider, byte[]) and AwsCrypto.encryptData(MasterKeyProvider, byte[], Map) APIs instead. encryptString and
decryptString work as expected if you use them together. However, to work with
other language implementations of the AWS Encryption SDK, you need to base64-decode the
output of encryptString and base64-encode the input to decryptString . These
deprecated APIs will be removed in the future. |
<K extends MasterKey<K>> |
AwsCrypto.encryptData(MasterKeyProvider<K> provider,
byte[] plaintext)
Returns the equivalent to calling
AwsCrypto.encryptData(MasterKeyProvider, byte[], Map) with an
empty encryptionContext . |
<K extends MasterKey<K>> |
AwsCrypto.encryptData(MasterKeyProvider<K> provider,
byte[] plaintext,
Map<String,String> encryptionContext)
Returns an encrypted form of
plaintext that has been protected with DataKeys that are in turn protected by MasterKeys provided by provider . |
<K extends MasterKey<K>> |
AwsCrypto.encryptString(MasterKeyProvider<K> provider,
String plaintext)
Deprecated.
Use the
AwsCrypto.encryptData(MasterKeyProvider, byte[]) and AwsCrypto.decryptData(MasterKeyProvider, byte[]) APIs instead. encryptString and decryptString work as expected if you use them together. However, to work with other
language implementations of the AWS Encryption SDK, you need to base64-decode the output of
encryptString and base64-encode the input to decryptString . These
deprecated APIs will be removed in the future. |
<K extends MasterKey<K>> |
AwsCrypto.encryptString(MasterKeyProvider<K> provider,
String plaintext,
Map<String,String> encryptionContext)
Deprecated.
Use the
AwsCrypto.encryptData(MasterKeyProvider, byte[], Map) and AwsCrypto.decryptData(MasterKeyProvider, byte[]) APIs instead. encryptString and decryptString work as expected if you use them together. However, to work with other
language implementations of the AWS Encryption SDK, you need to base64-decode the output of
encryptString and base64-encode the input to decryptString . These
deprecated APIs will be removed in the future. |
<K extends MasterKey<K>> |
AwsCrypto.estimateCiphertextSize(MasterKeyProvider<K> provider,
int plaintextSize)
Returns the equivalent to calling
AwsCrypto.estimateCiphertextSize(MasterKeyProvider, int, Map)
with an empty encryptionContext . |
<K extends MasterKey<K>> |
AwsCrypto.estimateCiphertextSize(MasterKeyProvider<K> provider,
int plaintextSize,
Map<String,String> encryptionContext)
Returns the best estimate for the output length of encrypting a plaintext with the provided
plaintextSize and encryptionContext . |
Constructor and Description |
---|
DefaultCryptoMaterialsManager(MasterKeyProvider<?> mkp) |
Modifier and Type | Method and Description |
---|---|
CachingCryptoMaterialsManager.Builder |
CachingCryptoMaterialsManager.Builder.withMasterKeyProvider(MasterKeyProvider mkp)
Sets the
MasterKeyProvider that should be queried when the CachingCryptoMaterialsManager (CCMM) incurs a cache miss. |
Modifier and Type | Method and Description |
---|---|
static <K extends MasterKey<K>> |
DecryptionHandler.create(MasterKeyProvider<K> customerMasterKeyProvider,
CiphertextHeaders headers,
CommitmentPolicy commitmentPolicy,
SignaturePolicy signaturePolicy,
int maxEncryptedDataKeys)
Deprecated.
This version may have to recalculate the number of bytes already parsed, which adds
a performance penalty. Use
DecryptionHandler.create(CryptoMaterialsManager, ParsedCiphertext,
CommitmentPolicy, SignaturePolicy, int) instead, which makes the parsed byte count
directly available instead. |
static <K extends MasterKey<K>> |
DecryptionHandler.create(MasterKeyProvider<K> customerMasterKeyProvider,
CommitmentPolicy commitmentPolicy,
SignaturePolicy signaturePolicy,
int maxEncryptedDataKeys)
Create a decryption handler using the provided master key.
|
static <K extends MasterKey<K>> |
DecryptionHandler.create(MasterKeyProvider<K> customerMasterKeyProvider,
ParsedCiphertext headers,
CommitmentPolicy commitmentPolicy,
SignaturePolicy signaturePolicy,
int maxEncryptedDataKeys)
Create a decryption handler using the provided master key and already parsed
headers . |
Modifier and Type | Class and Description |
---|---|
class |
JceMasterKey
|
class |
KeyStoreProvider
This
MasterKeyProvider provides keys backed by a JCE KeyStore . |
Modifier and Type | Class and Description |
---|---|
class |
AwsKmsMrkAwareMasterKey
Represents a single Aws KMS key and is used to encrypt/decrypt data with
AwsCrypto . |
class |
AwsKmsMrkAwareMasterKeyProvider
Represents a list Aws KMS keys and is used to encrypt/decrypt data with
AwsCrypto . |
class |
KmsMasterKey
Represents a single Customer Master Key (CMK) and is used to encrypt/decrypt data with
AwsCrypto . |
class |
KmsMasterKeyProvider
Provides
MasterKey s backed by the AWS Key Management Service. |
Modifier and Type | Method and Description |
---|---|
static <K extends MasterKey<K>,P extends MasterKeyProvider<? extends K>> |
MultipleProviderFactory.buildMultiProvider(Class<K> masterKeyClass,
P... providers) |
static <P extends MasterKeyProvider<?>> |
MultipleProviderFactory.buildMultiProvider(P... providers) |
Modifier and Type | Method and Description |
---|---|
static <K extends MasterKey<K>> |
MultipleProviderFactory.buildMultiProvider(Class<K> masterKeyClass,
List<? extends MasterKeyProvider<? extends K>> providers) |
static <K extends MasterKey<K>,P extends MasterKeyProvider<? extends K>> |
MultipleProviderFactory.buildMultiProvider(Class<K> masterKeyClass,
P... providers) |
static MasterKeyProvider<?> |
MultipleProviderFactory.buildMultiProvider(List<? extends MasterKeyProvider<?>> providers) |
static <P extends MasterKeyProvider<?>> |
MultipleProviderFactory.buildMultiProvider(P... providers) |
Modifier and Type | Method and Description |
---|---|
static <K extends MasterKey<K>,P extends MasterKeyProvider<? extends K>> |
MultipleProviderFactory.buildMultiProvider(Class<K> masterKeyClass,
P... providers) |
static <P extends MasterKeyProvider<?>> |
MultipleProviderFactory.buildMultiProvider(P... providers) |
Modifier and Type | Method and Description |
---|---|
static <K extends MasterKey<K>> |
MultipleProviderFactory.buildMultiProvider(Class<K> masterKeyClass,
List<? extends MasterKeyProvider<? extends K>> providers) |
static MasterKeyProvider<?> |
MultipleProviderFactory.buildMultiProvider(List<? extends MasterKeyProvider<?>> providers) |
Copyright © 2023. All rights reserved.