/* * MinIO .NET Library for Amazon S3 Compatible Cloud Storage, (C) 2019 MinIO, Inc. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ using System.Text; using Minio.Helper; namespace Minio.DataModel.Encryption; /// /// Server-side encryption with AWS KMS managed keys /// public class SSEKMS : IServerSideEncryption { public SSEKMS(string key, IDictionary context = null) { if (string.IsNullOrEmpty(key)) throw new ArgumentException("KMS Key cannot be empty", nameof(key)); Key = key; Context = context; } protected IDictionary Context { get; set; } // Specifies the customer master key(CMK).Cannot be null protected string Key { get; set; } public EncryptionType GetEncryptionType() { return EncryptionType.SSE_KMS; } public void Marshal(IDictionary headers) { if (headers is null) throw new ArgumentNullException(nameof(headers)); headers.Add(Constants.SSEKMSKeyId, Key); headers.Add(Constants.SSEGenericHeader, "aws:kms"); if (Context is not null) headers.Add(Constants.SSEKMSContext, MarshalContext()); } /// /// Serialize context into JSON string. /// /// Serialized JSON context private string MarshalContext() { var sb = new StringBuilder(); sb.Append('{'); var i = 0; var len = Context.Count; foreach (var pair in Context) { sb.Append('"').Append(pair.Key).Append('"'); sb.Append(':'); sb.Append('"').Append(pair.Value).Append('"'); i++; if (i != len) sb.Append(':'); } sb.Append('}'); ReadOnlySpan contextBytes = Encoding.UTF8.GetBytes(sb.ToString()); #if NETSTANDARD return Convert.ToBase64String(contextBytes.ToArray()); #else return Convert.ToBase64String(contextBytes); #endif } }