Package org.aeonbits.owner.crypto
package org.aeonbits.owner.crypto
The seam through which a decryptor of yours is called: what
Config.EncryptedValue and
Config.DecryptorClass name, and the base classes that save an implementation
from writing the same two methods.
You supply the cryptography; nothing here ships any. The one implementation in the package,
IdentityDecryptor, returns the value it was given and exists so that
"no decryptor" is an object rather than a null.
Since 2.0.0 this is the older of two ways to keep a secret in a configuration, and the other one is
usually the one to write: a value that names what resolves it -
${$aes-gcm::…} - is read by a ValueHandler, of
which the library does ship two, and it is understood by every path that reads a value rather
than only by the annotated method. This one stays because configurations depend on it, and because a
decryptor written against an HSM or a key manager is a decryptor nobody else can write for you.
-
ClassDescriptionAn abstract implementation of Decryptor.An abstract implementation of Encryptor.A decryptor is a class which is able to decrypt a value.An encryptor is a class which is able to encrypt and decrypt a value.IdentityDecryptor is a no-op decryptor: it accepts a value and returns the same value for both decrypting and encrypting.