You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[C](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/c-language.html), [JavaScript](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/javascript.html), and a [command-line
21
+
The AWS Encryption SDK is available in [C](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/c-language.html), [C#/.NET](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/dot-net.html), [Java](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/java.html), [JavaScript](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/javascript.html), [Python](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/python.html), and a [command-line
24
22
interface](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/crypto-cli.html) that runs on Linux, macOS and Windows.
25
23
26
24
27
-
To protect data, the Encryption SDK uses *envelope encryption*. Each item of data is encrypted under a unique data key. Then, the data key is encrypted under a master key so it can be safely stored with the data. Your application does not have to generate or manage the data keys.
25
+
To protect data, the Encryption SDK uses *envelope encryption*. Each item of data is encrypted under a unique symmetric data key. Then the data key is encrypted under a wrapping key that you specify so the encrypted data key can be safely stored with the data. Your application does not have to generate or manage the data keys.
28
26
29
-
To protect the master key that encrypts the data keys, you can use a web service, such as [AWS Key
27
+
To protect the wrapping key that encrypts the data keys, you can use a web service, such as [AWS Key
30
28
Management Service](https://docs.aws.amazon.com/kms/latest/developerguide/) (AWS KMS), a hardware
31
29
security module (HSM), such as those offered by [AWS
32
30
CloudHSM](https://docs.aws.amazon.com/cloudhsm/latest/userguide/), or your existing key management tools. The AWS Encryption SDK does not require an AWS
0 commit comments