Class AzureKeyVaultEncryptionKeyResolver

constructor

• new AzureKeyVaultEncryptionKeyResolver(credentials): AzureKeyVaultEncryptionKeyResolver

• Parameters

  • credentials: TokenCredential

  Returns AzureKeyVaultEncryptionKeyResolver

encryptionKeyResolverName

unwrapKey

• unwrapKey(encryptionKeyId, algorithm, wrappedKey): Promise<Uint8Array>

• Unwraps the given wrapped key using the specified key encryption key path and algorithm.

  Parameters

  • encryptionKeyId: string

    path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.
  • algorithm: string

    algorithm to be used for unwrapping.
  • wrappedKey: Uint8Array

    wrapped DEK.

  Returns Promise<Uint8Array>

  unwrapped DEK.

wrapKey

• wrapKey(encryptionKeyId, algorithm, unwrappedKey): Promise<Uint8Array>

• wraps the given key using the specified key encryption key path and algorithm.

  Parameters

  • encryptionKeyId: string

    path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.
  • algorithm: string

    algorithm to be used for wrapping.
  • unwrappedKey: Uint8Array

    dek to be wrapped.

  Returns Promise<Uint8Array>

  wrapped DEK.