io.confluent.kafka.schemaregistry.encryption.azure

Class AzureKmsAead

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsAead

All Implemented Interfaces:

com.google.crypto.tink.Aead

public final class AzureKmsAead
extends Object
implements com.google.crypto.tink.Aead

A Aead that forwards encryption/decryption requests to a key in AZURE KMS.

Constructor Summary

Constructors

Constructor and Description
AzureKmsAead(com.azure.security.keyvault.keys.cryptography.CryptographyClient kmsClient, com.azure.security.keyvault.keys.cryptography.models.EncryptionAlgorithm algorithm) Constructor

Method Summary

Modifier and Type	Method and Description
byte[]	decrypt(byte[] ciphertext, byte[] associatedData)
byte[]	encrypt(byte[] plaintext, byte[] associatedData)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AzureKmsAead

public AzureKmsAead(com.azure.security.keyvault.keys.cryptography.CryptographyClient kmsClient,
                    com.azure.security.keyvault.keys.cryptography.models.EncryptionAlgorithm algorithm)

Constructor

Parameters:

kmsClient - - kms client

algorithm - - algorithm

Method Detail

encrypt

public byte[] encrypt(byte[] plaintext,
                      byte[] associatedData)
               throws GeneralSecurityException

Specified by:

encrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException

decrypt

public byte[] decrypt(byte[] ciphertext,
                      byte[] associatedData)
               throws GeneralSecurityException

Specified by:

decrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException