Package io.confluent.kafka.schemaregistry.encryption.aws

Class AwsKmsAead

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.aws.AwsKmsAead

All Implemented Interfaces:

com.google.crypto.tink.Aead

public final class AwsKmsAead
extends Object
implements com.google.crypto.tink.Aead

A Aead that forwards encryption/decryption requests to a key in AWS KMS.

Since:

1.0.0

Constructor Summary

Constructors

Constructor	Description
AwsKmsAead(software.amazon.awssdk.services.kms.KmsClient kmsClient, String keyArn)

Method Summary

Modifier and Type	Method	Description
byte[]	decrypt(byte[] ciphertext, byte[] associatedData)
byte[]	encrypt(byte[] plaintext, byte[] associatedData)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AwsKmsAead

public AwsKmsAead(software.amazon.awssdk.services.kms.KmsClient kmsClient,
 String keyArn)

Method Details

encrypt

public byte[] encrypt(byte[] plaintext,
 byte[] associatedData)
               throws GeneralSecurityException

Specified by:

encrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException

decrypt

public byte[] decrypt(byte[] ciphertext,
 byte[] associatedData)
               throws GeneralSecurityException

Specified by:

decrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException