| | | 1 | | // Copyright (c) Microsoft Corporation. All rights reserved. |
| | | 2 | | // Licensed under the MIT License. |
| | | 3 | | |
| | | 4 | | namespace Azure.Storage.Cryptography.Models |
| | | 5 | | { |
| | | 6 | | /// <summary> |
| | | 7 | | /// Represents the envelope key details JSON schema stored on the service. |
| | | 8 | | /// In the envelope technique, a securely generated content encryption key (CEK) is generated |
| | | 9 | | /// for every encryption operation. It is then encrypted (wrapped) with the user-provided key |
| | | 10 | | /// encryption key (KEK), using a key-wrap algorithm. The wrapped CEK is stored with the |
| | | 11 | | /// encrypted data, and needs the KEK to be unwrapped. The KEK and key-wrapping operation is |
| | | 12 | | /// never seen by this SDK. |
| | | 13 | | /// </summary> |
| | | 14 | | internal class KeyEnvelope |
| | | 15 | | { |
| | | 16 | | /// <summary> |
| | | 17 | | /// The key identifier string. |
| | | 18 | | /// </summary> |
| | 24 | 19 | | public string KeyId { get; set; } |
| | | 20 | | |
| | | 21 | | /// <summary> |
| | | 22 | | /// The encrypted content encryption key. |
| | | 23 | | /// </summary> |
| | 24 | 24 | | public byte[] EncryptedKey { get; set; } |
| | | 25 | | |
| | | 26 | | /// <summary> |
| | | 27 | | /// The algorithm used to wrap the content encryption key. |
| | | 28 | | /// </summary> |
| | 24 | 29 | | public string Algorithm { get; set; } |
| | | 30 | | } |
| | | 31 | | } |