@aws-crypto/material-management-node

Keyring Management

This feature allows you to create and manage keyrings, which are collections of cryptographic keys used for encryption and decryption. The code sample demonstrates how to create a KMS keyring using AWS KMS keys.

const { KmsKeyringNode } = require('@aws-crypto/client-node');

const keyring = new KmsKeyringNode({
  generatorKeyId: 'arn:aws:kms:us-west-2:123456789012:key/abcd1234-a123-456a-a12b-a123b4cd56ef',
  keyIds: ['arn:aws:kms:us-west-2:123456789012:key/abcd1234-a123-456a-a12b-a123b4cd56ef']
});

Encryption

This feature enables you to encrypt data using the specified keyring. The code sample shows how to encrypt a plaintext string using the keyring created earlier.

const { encrypt } = require('@aws-crypto/client-node');

const plaintext = 'Hello, World!';
const { result } = await encrypt(keyring, plaintext);
console.log(result);

Decryption

This feature allows you to decrypt data that was previously encrypted using a keyring. The code sample demonstrates how to decrypt a ciphertext string using the keyring.

const { decrypt } = require('@aws-crypto/client-node');

const ciphertext = '...'; // Encrypted data
const { plaintext, messageHeader } = await decrypt(keyring, ciphertext);
console.log(plaintext.toString());