Sha256: c66c6d0b7704f81467fd7c04bf3c8b09be5e32a46881d3f9dd57352ae4d45734
Contents?: true
Size: 1.07 KB
Versions: 6
Compression:
Stored size: 1.07 KB
Contents
This directory contains Data Encryption Key (DEKs) encrypted by various Key Encryption Keys (KEKs) for testing.
Files are named as follows:
- `<UUID>-key-material.txt` is the decrypted key material.
- `<UUID>-local-document.json` is a key document with "_id" of <UUID> encrypted with a local KEK.
- `<UUID>-aws-document.json` is a key document with "_id" of <UUID> encrypted with an AWS KEK.
- `<UUID>-aws-decrypt-reply.txt` is an HTTP reply from AWS KMS decrypting the DEK.
The key material of the local KEK 96 bytes of 0.
The `csfle` CLI tool was used to generate output for these files. Here is an example command used for creating a "-aws-document.json" file:
```bash
./cmake-build/csfle create_datakey \
--kms_providers_file ~/.csfle/kms_providers.json \
--kms_provider aws \
--aws_kek_region us-east-1 \
--aws_kek_key 'arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0' \
--key_material "p928TIvgDVH2jZ2OSF81HI7cjSIGsk2ODhgW0AX75SDkiRJQR9ZHsNhoS/vb8JwwQIXtCGq6bCsrFnfMyRztiEenM79eVoLISz7nlp5KX+Dgwh5ePuGQWVpV+DFH2N4q"
```
Version data entries
6 entries across 6 versions & 1 rubygems