io.confluent.kafka.schemaregistry.encryption.aws

Class AwsKmsAead

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.aws.AwsKmsAead

All Implemented Interfaces:

com.google.crypto.tink.Aead

public final class AwsKmsAead
extends Object
implements com.google.crypto.tink.Aead

A Aead that forwards encryption/decryption requests to a key in AWS KMS.

Since:

1.0.0

Constructor Summary

Constructors

Constructor and Description
AwsKmsAead(software.amazon.awssdk.services.kms.KmsClient kmsClient, String keyArn)

Method Summary

Modifier and Type	Method and Description
byte[]	decrypt(byte[] ciphertext, byte[] associatedData)
byte[]	encrypt(byte[] plaintext, byte[] associatedData)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AwsKmsAead

public AwsKmsAead(software.amazon.awssdk.services.kms.KmsClient kmsClient,
                  String keyArn)

Method Detail

encrypt

public byte[] encrypt(byte[] plaintext,
                      byte[] associatedData)
               throws GeneralSecurityException

Specified by:

encrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException

decrypt

public byte[] decrypt(byte[] ciphertext,
                      byte[] associatedData)
               throws GeneralSecurityException

Specified by:

decrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException