public static interface KeyProviderCryptoExtension.CryptoExtension extends KeyProviderExtension.Extension
| Modifier and Type | Method and Description |
|---|---|
KeyProvider.KeyVersion |
decryptEncryptedKey(KeyProviderCryptoExtension.EncryptedKeyVersion encryptedKeyVersion)
Decrypts an encrypted byte[] key material using the given a key version
name and initialization vector.
|
void |
drain(String keyName)
Drains the Queue for the provided key.
|
KeyProviderCryptoExtension.EncryptedKeyVersion |
generateEncryptedKey(String encryptionKeyName)
Generates a key material and encrypts it using the given key version name
and initialization vector.
|
void |
warmUpEncryptedKeys(String... keyNames)
Calls to this method allows the underlying KeyProvider to warm-up any
implementation specific caches used to store the Encrypted Keys.
|
void warmUpEncryptedKeys(String... keyNames) throws IOException
keyNames - Array of Key NamesIOExceptionvoid drain(String keyName)
keyName - the key to drain the Queue forKeyProviderCryptoExtension.EncryptedKeyVersion generateEncryptedKey(String encryptionKeyName) throws IOException, GeneralSecurityException
KeyVersion material of the latest key version
of the key and is encrypted using the same cipher.
NOTE: The generated key is not stored by the KeyProviderencryptionKeyName - The latest KeyVersion of this key's material will be encrypted.IOException - thrown if the key material could not be generatedGeneralSecurityException - thrown if the key material could not be encrypted because of a
cryptographic issue.KeyProvider.KeyVersion decryptEncryptedKey(KeyProviderCryptoExtension.EncryptedKeyVersion encryptedKeyVersion) throws IOException, GeneralSecurityException
encryptedKeyVersion - contains keyVersionName and IV to decrypt the encrypted key
materialIOException - thrown if the key material could not be decryptedGeneralSecurityException - thrown if the key material could not be decrypted because of a
cryptographic issue.Copyright © 2022 Apache Software Foundation. All rights reserved.