cossacklabs / acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
https://www.cossacklabs.com/acra/
Apache License 2.0
1.33k stars 128 forks source link

Add KeyMapper abstraction for KMS #579

Closed Zhaars closed 1 year ago

Zhaars commented 1 year ago

Added KeyMapper abstraction for KMS KeyEncryptor. As our KMS KeyEncryptor needs some logic for creating KeyID from KeyContext to use it in key-related operations we need to have some abstraction over it to be able to switch key mapping logic for different strategies.

New interface KeyMapper was introduced and implemented for AWS KMS.

Checklist