Andreas Auernhammer 01cb705c36 crypto: add support for KMS key versions ...

This commit adds support for KMS master key versions.
Now, MinIO stores any key version information returned by the
KMS as part of the object metadata. The key version identifies
a particular master key within a master key ring. When encrypting/
generating a DEK, MinIO has to remember the key version - similar to
the key name. When decrypting a DEK, MinIO sends the key version to
the KMS such that the KMS can identify the exact key version that
should be used to decrypt the object.

Existing objects don't have a key version. Hence, this field will
be empty.

Signed-off-by: Andreas Auernhammer <github@aead.dev>

2025-05-05 22:35:43 +02:00

..

auto-encryption.go

ldap: Add user DN attributes list config param (#19758)

2024-05-24 16:05:23 -07:00

doc.go

upgrade golang-lint to the latest (#15600)

2022-08-26 12:52:29 -07:00

error.go

Enable replication of SSE-C objects (#19107)

2024-03-28 10:44:56 -07:00

header_test.go

Add padding to compressed+encrypted files (#15282)

2022-07-13 07:52:15 -07:00

header.go

use typos instead of codespell (#19088)

2024-02-21 22:26:06 -08:00

key_test.go

do not print unexpected logs (#20083)

2024-07-12 13:51:54 -07:00

key.go

crypto: generate OEK using HMAC-SHA256 instead of SHA256 (#19297)

2024-03-19 13:28:10 -07:00

metadata_test.go

crypto: add support for KMS key versions

2025-05-05 22:35:43 +02:00

metadata.go

crypto: add support for KMS key versions

2025-05-05 22:35:43 +02:00

sse_test.go

rename all remaining packages to internal/ (#12418)

2021-06-01 14:59:40 -07:00

sse-c.go

add codespell action (#18818)

2024-01-17 23:03:17 -08:00

sse-kms.go

crypto: add support for KMS key versions

2025-05-05 22:35:43 +02:00

sse-s3.go

crypto: add support for KMS key versions

2025-05-05 22:35:43 +02:00

sse.go

chore: remove duplicate word in comments (#15607)

2022-08-30 08:26:43 -07:00