NewCryptographicMaterialsManager creates a new DefaultCryptographicMaterialsManager with the given Keyring.

NewKmsDecryptOnlyAnyKeyKeyring creates a new KmsAnyKeyKeyring.

NewKmsKeyring creates a new KmsKeyring which calls KMS to encrypt/decrypt the data key used to encrypt the S3 object.

GrantToken is the key used to store the grant tokens in the context.

KMSContextKeyring is a constant used during decryption to build a kms+context keyring.

KMSKeyring is a constant used during decryption to build a KMS key handler.

CryptographicMaterials is used for content encryption.

DecryptMaterialsRequest contains the information required to assemble the DecryptionMaterials which are used by Keyring.OnDecrypt to decrypt the encrypted data key.

DefaultCryptographicMaterialsManager provides support for encrypting and decrypting S3 objects using the configured Keyring.

KeyringOptions is for additional configuration on Keyring types to perform additional behaviors.

KmsAnyKeyKeyring is decrypt-only.

KmsKeyring encrypts with encryption context and on decrypt it checks for the algorithm in the material description and makes the call to commonDecrypt with the correct parameters.

CryptographicMaterialsManager (CMM) assembles the cryptographic materials used to encrypt and decrypt the encrypted objects.

Keyring implementations are responsible for encrypting/decrypting data keys using some kind of key material.

KmsAPIClient is a client that implements the GenerateDataKey and Decrypt operations.

MaterialDescription is used to identify how and what master key has been used.