kms Crypto AESDecrypter Decrypt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
using System; | |
using System.IO; | |
using System.Security.Cryptography; | |
using System.Threading.Tasks; | |
using Abstractions; | |
using Amazon.KeyManagementService; | |
using Amazon.KeyManagementService.Model; | |
namespace Crypto | |
{ | |
public class AESDecrypter : IDecrypter | |
{ | |
private readonly string _keyId = "<your-key>"; | |
private readonly byte[] _iv = new byte[] { 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 }; | |
public async Task<string> Decrypt(IEncryptionPackage encryptionPackage) | |
{ | |
AmazonKeyManagementServiceClient kmsClient = new AmazonKeyManagementServiceClient(); | |
MemoryStream ciphertextBlob = new MemoryStream(Convert.FromBase64String((encryptionPackage.EncryptedKey))); | |
DecryptRequest decryptRequest = new DecryptRequest() | |
{ | |
CiphertextBlob = ciphertextBlob, | |
KeyId = _keyId | |
}; | |
DecryptResponse decryptResponse = await kmsClient.DecryptAsync(decryptRequest); | |
byte[] key = decryptResponse.Plaintext.ToArray(); | |
string plainText = String.Empty; | |
byte[] byteData = Convert.FromBase64String(encryptionPackage.CipherText); | |
using (Aes aes = Aes.Create()) | |
{ | |
using (MemoryStream memoryStream = new MemoryStream(byteData)) | |
{ | |
using (CryptoStream cryptoStream = new CryptoStream(memoryStream, aes.CreateDecryptor(key, _iv), CryptoStreamMode.Read)) | |
{ | |
using (StreamReader streamReader = new StreamReader(cryptoStream)) | |
{ | |
plainText = streamReader.ReadToEnd(); | |
} | |
} | |
} | |
} | |
return plainText; | |
} | |
} | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment