User Guide
Quick Start
Tasks
- Create an NAE Session
- Setting up SSL with CipherTrust Manager
- Add Multiple CipherTrust Manager Servers
- Key Operations
  - Creating a Key
  - Creating a New Version of the Versioned Key
  - Using a Versioned Key to Decrypt, SignV, and MACV
  - Getting an Instance of a Key Object
  - Alternative Method to Get an Instance of a Key Object
  - Deleting a Key using the Key Name
  - Exporting a Key
  - Exporting a Wrapped Key
  - Setting a Key Mode and Padding
  - Getting Attributes of a Key
  - Exporting Versioned Key
  - Fetching Key Version using ID
  - Fetching Key Names
- Generate and Verify MAC
- Encrypt a String Using an AES Key
- Decrypt a String Using an AES Key
- Encrypt a String Using an RSA Key
- Decrypt a String Using an RSA Key
- Encrypting/Decrypting a File
- Sign and SignVerify Data using an EC Key
- Sign and SignVerify Data using an RSA Key
- Enable Connection Pooling
- Enable Symmetric Key Caching
- Enable Asymmetric Key Caching
- Set Logging Parameters
- Change the Default Value of Connection Timeout
- Setting Transaction ID in Logs
- Logging to Syslog Server
- Refresh Cached Keys
- CryptoHeader Module
- AES/GCM Interoperability
- Upgrade from PA/CAP to CADP
- Migrate from KeySecureHeaderModule to CryptoHeaderModule
Advanced Topics
- Configuration
  - Network Configuration Parameters
  - Connection Configuration Parameters
  - Caching Parameters
  - Logging Parameters
  - Syslog Advanced Configuration Parameters
  - SSL Configuration Parameters
  - Miscellaneous Configuration Parameters
- Connection Pooling
- Load Balancing Group
- Multi-tier Load Balancing Group
- Symmetric/Asymmetric Key Caching
- Persistent Key Caching
- Supported Services & Operations
- Supported Algorithms
- NAE Supported Functions
  - Supporting Calls
  - Connection Calls
  - Key-related Calls
  - MAC/Hash-related Calls
  - Security Considerations
- Format Preserving Encryption
- FPE/AES/Unicode Cardinality Block-Size Table
- API Definitions
- Key Permissions on Groups
- CryptoDataUtility
- Error Messages
- Advisory Notes and Best Practices
Troubleshooting

Decrypt a String Using an AES Key

Create a NAE Session. Pass NAE username, password, and property file path as arguments.
```
NaeSession session = new NaeSession(user, passwd, propFilePath);
```
Create an NaeRijndaelKey object. Pass the NaeSession object and keyname as arguments.
```
NaeRijndaelKey key = new NaeRijndaelKey(session, keyname);
```

Specify an IV, if necessary, by creating a new byte array.

byte[] iv = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0x30, 0x31,
0x32, 0x33, 0x34, 0x35 };
key.IV = iv;

Set key mode and padding.

key.Padding = PaddingMode.PKCS7;
key.Mode = CipherMode.CBC;

Decrypt the data.

ICryptoTransform decryptor = key.CreateDecryptor();
System.IO.MemoryStream memstr2 = new System.IO.MemoryStream();
CryptoStream decrstr = new CryptoStream(memstr2, key.CreateDecryptor(),
CryptoStreamMode.Write);
decrstr.Write(encrBytes, 0, encrBytes.Length);
decrstr.Close();
byte[] decrBytes = memstr2.ToArray();
Console.WriteLine("Decrypted {0} bytes: {1}", Convert.ToString(decrBytes.Length),
new String(Encoding.UTF8.GetChars(decrBytes)));

Note

The CreateDecryptor API doesn't support decrypting large data using chunking mechanism. To decrypt large data, refer to Encrypting/Decrypting a File.

Suggest A Change

Decrypt a String Using an AES Key

On this page