Amazon Encryption SDK Concepts

From NovaOrdis Knowledge Base
Revision as of 23:04, 12 December 2018 by Ovidiu (talk | contribs)
Jump to navigation Jump to search

Internal

Supported Algorithms

Amazon Encryption SDK Developer Guide - Supported Algorithms

The library uses an AES-GCM encryption algorithm with 256-bit, 192-bit and 128-bit encryption keys. The length of the Initialization Vector is 12 bytes. The length of the authentication tag is 16 bytes. By default, the SDK uses the data key as an input to the HMAC-based extract-and-expand key derivation function (HKDF) to derive the AES-GCM encryption key, and also adds an Elliptic Curve Digital Signature Algorithm (ECDSA) signature.


Data Key Caching

TODO: