AWS Cloud HSM: Client SDK 5: Isn't SDK 5 supports RSA Wrap and Unwrap?

0

Hello community, I am looking for Cloud HSM JCE based HSM connection. One of my requirements is to generate Plain AES key and Wrap it with RSA key. This is to implement something similar to what is called "Envelope Encryption" - https://www.google.com/search?q=envelope+encryption&rlz=1C5GCEM_enUS984US984&oq=envelope+en&aqs=chrome.2.69i57j35i39j0i512j0i20i263i512j0i512l3j69i60.21307j0j4&sourceid=chrome&ie=UTF-8.

What I am founding is that RSA wrap Unwrap code samples presents in SDK 3 code - https://github.com/aws-samples/aws-cloudhsm-jce-examples/blob/master/src/main/java/com/amazonaws/cloudhsm/examples/RSAWrappingRunner.java. HOWEVER THIS IS NOT PRESENT IN SDK 5 code.

Does that mean SDK 5 does not support AES RSA WRAP UNWRAP. I have tried running this with SDK 5 and getting "UNSUPPORTED OPERATION EXCEPTION" which strengthen my doubt. PLEASE CONFIRM.

If this is true, then when it be supported? I want to use latest SDK provided that it can have more fixes on top of what SDK 3 already has.

kp
gefragt vor 2 Jahren305 Aufrufe
1 Antwort
0

Hello kp, thank you for reaching out!

Yes SDK 5 supports RSA wrap and unwrap. It's worth noting that the sample code you sent is 15 commits behind SDK 5. Here is link to the updated version https://github.com/aws-samples/aws-cloudhsm-jce-examples/blob/sdk5/src/main/java/com/amazonaws/cloudhsm/examples/RSAWrappingRunner.java

Hope this help

beantwortet vor 8 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen