Package io.confluent.kafka.schemaregistry.encryption.hcvault

Class HcVaultKmsAead

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.hcvault.HcVaultKmsAead

All Implemented Interfaces:

com.google.crypto.tink.Aead

public class HcVaultKmsAead
extends Object
implements com.google.crypto.tink.Aead

A Aead that forwards encryption/decryption requests to a key in Vault Transit Secrets Engine.

Constructor Summary

Constructors

Constructor	Description
HcVaultKmsAead(io.github.jopenlibs.vault.api.Logical vault, String keyUri)

Method Summary

Modifier and Type	Method	Description
byte[]	decrypt(byte[] ciphertext, byte[] associatedData)
byte[]	encrypt(byte[] plaintext, byte[] associatedData)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

HcVaultKmsAead

public HcVaultKmsAead(io.github.jopenlibs.vault.api.Logical vault,
 String keyUri)
               throws GeneralSecurityException

Throws:

GeneralSecurityException

Method Details

encrypt

public byte[] encrypt(byte[] plaintext,
 byte[] associatedData)
               throws GeneralSecurityException

Specified by:

encrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException

decrypt

public byte[] decrypt(byte[] ciphertext,
 byte[] associatedData)
               throws GeneralSecurityException

Specified by:

decrypt in interface com.google.crypto.tink.Aead

Throws:

GeneralSecurityException