← Back to plugin index

AES 128 GCM State Encryption
Description

State encryption that uses AES/GCM with 128-bit keys to encrypt all values stored in the state repository.

Type name
Aes128GcmStateEncryption
Class
com.airlock.iam.common.application.configuration.state.Aes128GcmStateEncryptionConfig
May be used by
Expert Mode Redis State Repository Migrating State Encryption Migrating State Encryption Single Mode Redis State Repository
Properties
Secret Key (secretKey)
Description
Key used for encryption and decryption, 128 bit encoded in Base64.

A random Base64 string with 128 bits (16 bytes) can be generated e.g. using openssl as follows: openssl rand -base64 16

CAUTION: Once the key is set and has been used to encrypt the key must not be changed!. Data encrypted with a different key cannot be recovered.

Attributes
String
Mandatory
Sensitive
Length >= 8
YAML Template (with default values) 

type: Aes128GcmStateEncryption
id: Aes128GcmStateEncryption-xxxxxx
displayName: 
comment: 
properties:
  secretKey: