io.confluent.kafka.schemaregistry.encryption.hcvault

Class HcVaultKmsAead

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.hcvault.HcVaultKmsAead

All Implemented Interfaces:

com.google.crypto.tink.Aead

public class HcVaultKmsAead
extends Object
implements com.google.crypto.tink.Aead

A Aead that forwards encryption/decryption requests to a key in Vault Transit Secrets Engine.

Constructor Summary

Constructors

Constructor and Description
HcVaultKmsAead(io.github.jopenlibs.vault.api.Logical vault, String keyUri)

Method Summary

Modifier and Type	Method and Description
byte[]	decrypt(byte[] ciphertext, byte[] associatedData)
byte[]	encrypt(byte[] plaintext, byte[] associatedData)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HcVaultKmsAead

public HcVaultKmsAead(io.github.jopenlibs.vault.api.Logical vault,
                      String keyUri)
               throws GeneralSecurityException

Throws:

GeneralSecurityException

Method Detail

encrypt

public byte[] encrypt(byte[] plaintext,
                      byte[] associatedData)
               throws GeneralSecurityException

Specified by:

encrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException

decrypt

public byte[] decrypt(byte[] ciphertext,
                      byte[] associatedData)
               throws GeneralSecurityException

Specified by:

decrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException