aws / aws/aws-encryption-sdk-java
Support Re-Key Operation in AwsCrypto
Open
enhancement
- Dominant language
- Java
- Stars
- 240
- Forks
- 125
- PR merge metrics
- No merged PRs in 30d
Description
For scenarios like key-rotation, I think it would be very useful to support a re-keying operation, where we decrypt the data key using one master key, and then re-encrypt with another master key. This also leverages the convenient envelope structure of the encrypted payload. I've noticed this is supported using the KMS Client (re-keying happens on the server side in that case), but feels like it should also exist in the SDK as well!
Thoughts?
Nick
CC: @walliee
Contributor guide
Assessment
This issue has not been assessed yet.