AWS Cloud HSM: Client SDK 5: Isn't SDK 5 supports RSA Wrap and Unwrap?

0

Hello community, I am looking for Cloud HSM JCE based HSM connection. One of my requirements is to generate Plain AES key and Wrap it with RSA key. This is to implement something similar to what is called "Envelope Encryption" - https://www.google.com/search?q=envelope+encryption&rlz=1C5GCEM_enUS984US984&oq=envelope+en&aqs=chrome.2.69i57j35i39j0i512j0i20i263i512j0i512l3j69i60.21307j0j4&sourceid=chrome&ie=UTF-8.

What I am founding is that RSA wrap Unwrap code samples presents in SDK 3 code - https://github.com/aws-samples/aws-cloudhsm-jce-examples/blob/master/src/main/java/com/amazonaws/cloudhsm/examples/RSAWrappingRunner.java. HOWEVER THIS IS NOT PRESENT IN SDK 5 code.

Does that mean SDK 5 does not support AES RSA WRAP UNWRAP. I have tried running this with SDK 5 and getting "UNSUPPORTED OPERATION EXCEPTION" which strengthen my doubt. PLEASE CONFIRM.

If this is true, then when it be supported? I want to use latest SDK provided that it can have more fixes on top of what SDK 3 already has.

kp
質問済み 2年前305ビュー
1回答
0

Hello kp, thank you for reaching out!

Yes SDK 5 supports RSA wrap and unwrap. It's worth noting that the sample code you sent is 15 commits behind SDK 5. Here is link to the updated version https://github.com/aws-samples/aws-cloudhsm-jce-examples/blob/sdk5/src/main/java/com/amazonaws/cloudhsm/examples/RSAWrappingRunner.java

Hope this help

回答済み 8ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ