Package io.confluent.kafka.schemaregistry.encryption
package io.confluent.kafka.schemaregistry.encryption
-
ClassDescriptionIn envelope encryption, a user generates a data encryption key (DEK) locally, encrypts data with the DEK, sends the DEK to a KMS to be encrypted (with a key managed by KMS - KEK), and then stores the encrypted DEK.Field-level decryption outcome recorded under
EncryptionExecutor.META_STATUSduring deserialization.In envelope encryption, a user generates a data encryption key (DEK) locally, encrypts data with the DEK, sends the DEK to a KMS to be encrypted (with a key managed by KMS - KEK), and then stores the encrypted DEK.