File tree 2 files changed +5
-5
lines changed
2 files changed +5
-5
lines changed Original file line number Diff line number Diff line change 8
8
data using the data key. By setting this algorithm, you can configure the algorithm used
9
9
to encrypt and decrypt your data.
10
10
11
- Encryption algorithms can be set in a similar manner in other keyrings as well. However,
11
+ Algorithm suites can be set in a similar manner in other keyrings as well. However,
12
12
please make sure that you're using a logical algorithm suite that is compatible with your
13
13
keyring. For more information on algorithm suites supported by the AWS Encryption SDK, see
14
14
https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/supported-algorithms.html
19
19
latter, which is the algorithm suite for protecting your data. When the commitment policy is
20
20
REQUIRE_ENCRYPT_REQUIRE_DECRYPT, the default algorithm used in the encrypt method is
21
21
AES_256_GCM_HKDF_SHA512_COMMIT_KEY_ECDSA_P384, which is a committing and signing algorithm.
22
- Signature verification is extremely useful to ensure the integrity of a digital message as it goes
23
- between systems . However, signature verification adds a significant performance cost to encryption
22
+ Signature verification ensures the integrity of a digital message as it goes across trust
23
+ boundaries . However, signature verification adds a significant performance cost to encryption
24
24
and decryption. If encryptors and decryptors are equally trusted, we can consider using an algorithm
25
25
suite that does not include signing. This example sets the algorithm suite as
26
26
AES_256_GCM_HKDF_SHA512_COMMIT_KEY, which is a committing but non-signing algorithm.
Original file line number Diff line number Diff line change 1
1
# Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
2
2
# SPDX-License-Identifier: Apache-2.0
3
- """Test suite for the Set Encryption Algorithm Suite example for a Raw AES keyring."""
3
+ """Test suite for the Set Algorithm Suite example for a Raw AES keyring."""
4
4
import pytest
5
5
6
6
from ...src .keyrings .set_encryption_algorithm_suite_example import encrypt_and_decrypt_with_keyring
9
9
10
10
11
11
def test_encrypt_and_decrypt_with_keyring ():
12
- """Test function for setting an encryption algorithm suite in a Raw AES Keyring."""
12
+ """Test function for setting an algorithm suite in a Raw AES Keyring."""
13
13
encrypt_and_decrypt_with_keyring ()
You can’t perform that action at this time.
0 commit comments