Encryption Examples
The following example shows how to define encryption actions for two columns using AES_CBC_PAD and FPE encryption:
{
"name" : "column2",
"action" : "ENCRYPT",
"config" : [ {
"@type" : "AES_CBC_PAD",
"key" : "c2KeyName",
"iv":"000102030405060708090A0B0C0D0E0F"
} ]
}, {
"name" : "column3",
"action" : "ENCRYPT",
"config" : [ {
"@type" : "FPE",
"key" : "c3KeyName",
"characterSet":"digits",
"tweak":"0102030405060708"
} ]
}
The following example shows how to define encryption actions for one column using FF1 encryption:
{
"id":"transformation-id",
"name":"transformation-name",
"createBadRecordFile":true,
"source":{
"@type":"CSV_FILE",
"filepath":"input.csv",
"delimiter":",",
"columnCount":"12",
"hasHeaderRow":true
},
"destination":{
"@type":"CSV_FILE",
"filepath":"output.csv"
},
"tables":[
{
"columns":[
{
"name":"latitude",
"action":"ENCRYPT",
"config":[
{
"@type":"FF1",
"key":"KEYNAME",
"tweak":"auto",
"characterSet":"digits"
}
]
}
]
}
]
}
The following example shows how to define encryption actions for a column using DESede encryption:
{
"name" : "column",
"action" : "ENCRYPT",
"config" : [
{
"@type" : "DESede",
"key" : "DESedekey",
“mode” : "CBC",
“padding” : "PKCS5Padding",
"iv":"010ACD5B99F3C343"
}
]
Note
Output and input are base-64 encoded for AES_CBC_PAD mode in ENCRYPT, DECRYPT, and REKEY actions.
