Package org.jwcarman.codec.crypto

package org.jwcarman.codec.crypto

Class	Description
BoundedDataKeyStrategy	Opt-in DataKeyStrategy that caches a data-encryption key (DEK) and rolls to a fresh one after maxMessages messages or maxAge has elapsed, whichever comes first.
DataKey	A data-encryption key (DEK) acquired from a DataKeyProvider: the plaintext key material used to encrypt or decrypt one message, paired with the id of the key-encryption key (KEK) that wrapped it and the wrapped (ciphertext) form of the key itself.
DataKeyProvider	SPI for envelope-encryption key management, implemented by consumers against an in-process key store or a remote KMS (AWS KMS, HashiCorp Vault, GCP Cloud KMS, etc.).
DataKeyStrategy	Pure lifecycle policy for acquiring the data-encryption key used to encode a message.
DecryptionException	Exception indicating that the data provided for decryption is invalid or corrupted.
DirectDataKeyStrategy	Default DataKeyStrategy: acquires a fresh data-encryption key per message.
EncryptionException	Exception indicating a failure during the encryption operation.
EnvelopeCodec	Envelope-encryption Codec for byte[]: encrypts with AES-256-GCM under a per-message data-encryption key (DEK), itself wrapped by a DataKeyProvider and carried alongside the ciphertext.
EnvelopeCodec.Builder	Builder for EnvelopeCodec.
JceDataKeyProvider	In-process DataKeyProvider for consumers without a KMS, backed by one or more key-encryption keys (KEKs) supplied at construction.
JceDataKeyProvider.Builder	Builder for JceDataKeyProvider.
KeyAccessException	Exception indicating that key infrastructure is unavailable.