Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CTE-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Widows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

Stateless APIs

Decrypt

search

Please Note:

You are not viewing the most recent version of this page. 8.17.1 is the latest version available.

print

Decrypt

This API decrypts data using key specified by name.

copy link to clipboardURL

<http/https>://<host-name>:<Port>/protectappws/services/rest/decrypt

copy link to clipboardInput Parameters

ParametersDescription
usernameUser name.
passwordPassword associated with the user.
keynameName of the key to be used for decryption.
ciphertextEncrypted data represented in Hex.
keyivOptional/blank. If blank, the key’s default IV is used, else, specify in IV in Hex characters. The number of Hex character must be specific to the transformation used.
transformationTransformation to be used. For example: AES/ ECIES/CBC/PKCS5Padding. For more information on supported ECIES transformations, refer to the CipherTrust Application Data Protection for Java User Guide.
outputformat(Optional), displays output in following formats:
— HEX
— STR (default)
—
—BASE64
certAliasOptional, is a client certificate alias for making SSL connections.
certPassOptional, is the password for the provided certificate alias.

copy link to clipboardSample REST call for cxf

request

{
    "Decrypt": {
        "username": "cryptouser",
        "password": "safenet123",
        "keyname": "testKey",
        "keyiv": "12345678123456781234567812345678",
        "transformation": "AES/CBC/PKCS5Padding",
        "ciphertext": "100010EBF1B02D8CFAC300502398BD7FD5DB1A",
        "outputformat": "STR"
    }
}

response

{
    "DecryptResponse": {
        "plainText": "hello world!"
    }
}

copy link to clipboardSample SOAP Parameters

Plaintext data.

<prot:Decrypt>
<username>cryptouser</username>
<password>qwerty1234</password>
<keyname>aes256vt</keyname>
<ciphertext>10009046C980ECAFC6A79765A7ABAE01C846C5</ciphertext>
<!--Optional:-->
<keyiv></keyiv>
<transformation>AES/CBC/PKCS5Padding</transformation>
<!--Optional:-->
<outputformat>STR</outputformat>
</prot:Decrypt>

copy link to clipboardoutput

Plaintext data.

<ns1:DecryptResponse xmlns:ns1="http://dsws.org/protectappws/">0000111122223333</ns1:DecryptResponse>

Note

In almost all cases the keyiv and transformation should not be specified: It is a useful practice to utilize the Key Manager appliances capability to store the IV for the application and AES/CBC/PKCS5Padding – the default - is the most recommended cipher block mode.

On this page