KMIP Decrypt

KMIP Decrypt request includes information about the cryptographic parameters, mode and padding method, data to be decrypted and the IV to be used. The decrypt request may not contain the IV if the algorithm does not use an IV. The response includes the key i.e. the unique identifier of the managed cryptographic object and the decrypted text.

For AES

KMIPCipher cipher = KMIPCipher.getInstance(string algoName);
KMIPIvSpec spec = new KMIPIvSpec(byte[] iv);
cipher.init(KMIPCipher.DECRYPT_MODE, KMIPIvSpec spec, KMIPSession session, String uid);
KMIPCryptoResult res=cipher.doFinal(byte[] data);

Example

KMIPCipher cipher1 = KMIPCipher.getInstance("AES/CBC/PKCS5Padding");
KMIPIvSpec spec1 = new KMIPIvSpec(IngrianProvider.hex2ByteArray(result.getIv()));
cipher1.init(KMIPCipher.DECRYPT_MODE, spec1, session,"516BB93CF328774BA0545BC819FE26ACA8054430B0FF32BA9EA119BF6187A075");
KMIPCryptoResult result1 = cipher1.doFinal(result.getData());
System.out.println(new String(result1.getData()));

Note

Instead of UID, keyName can also be used. Check overloaded API for same.

For AES/GCM

KMIPCipher cipher = KMIPCipher.getInstance(string algoName);
KMIPGCMSpec spec = new KMIPGCMSpec(int tagLength, byte[] bytes));

For RSA

KMIPCipher cipher = KMIPCipher.getInstance(string algoName);
cipher.init(KMIPCipher.DECRYPT_MODE, KMIPSession session, String uid);
KMIPCryptoResult result = cipher.doFinal(byte[] data);

KMIP Decrypt

For AES

Example

For AES/GCM

For RSA

On this page

Suggest A Change