FM / Crypto

/home/techb158/immovalet.com/vendor/aws/aws-sdk-php/src/Crypto/

/home/techb158/immovalet.com/vendor/aws/aws-sdk-php/src/Crypto

Name	Size	Mode	Actions
Cipher/	-	0755	rm
Polyfill/	-	0755	rm
AbstractCryptoClient.php	4084	0644	edit dl rm
AbstractCryptoClientV2.php	3973	0644	edit dl rm
AesDecryptingStream.php	3508	0644	edit dl rm
AesEncryptingStream.php	3711	0644	edit dl rm
AesGcmDecryptingStream.php	2570	0644	edit dl rm
AesGcmEncryptingStream.php	2767	0644	edit dl rm
AesStreamInterface.php	656	0644	edit dl rm
AesStreamInterfaceV2.php	728	0644	edit dl rm
DecryptionTrait.php	6102	0644	edit dl rm
DecryptionTraitV2.php	9259	0644	edit dl rm
EncryptionTrait.php	7032	0644	edit dl rm
EncryptionTraitV2.php	7217	0644	edit dl rm
KmsMaterialsProvider.php	3989	0644	edit dl rm
KmsMaterialsProviderV2.php	3514	0644	edit dl rm
MaterialsProvider.php	3305	0644	edit dl rm
MaterialsProviderInterface.php	1851	0644	edit dl rm
MaterialsProviderInterfaceV2.php	1713	0644	edit dl rm
MaterialsProviderV2.php	2055	0644	edit dl rm
MetadataEnvelope.php	1581	0644	edit dl rm
MetadataStrategyInterface.php	996	0644	edit dl rm

Edit: /home/techb158/immovalet.com/vendor/aws/aws-sdk-php/src/Crypto/KmsMaterialsProviderV2.php (3514B)

<?php
namespace Aws\Crypto;

use Aws\Exception\CryptoException;
use Aws\Kms\KmsClient;

/**
 * Uses KMS to supply materials for encrypting and decrypting data. This
 * V2 implementation should be used with the V2 encryption clients (i.e.
 * S3EncryptionClientV2).
 */
class KmsMaterialsProviderV2 extends MaterialsProviderV2 implements MaterialsProviderInterfaceV2
{
    const WRAP_ALGORITHM_NAME = 'kms+context';

private $kmsClient;
    private $kmsKeyId;

/**
     * @param KmsClient $kmsClient A KMS Client for use encrypting and
     *                             decrypting keys.
     * @param string $kmsKeyId The private KMS key id to be used for encrypting
     *                         and decrypting keys.
     */
    public function __construct(
        KmsClient $kmsClient,
        $kmsKeyId = null
    ) {
        $this->kmsClient = $kmsClient;
        $this->kmsKeyId = $kmsKeyId;
    }

/**
     * @inheritDoc
     */
    public function getWrapAlgorithmName()
    {
        return self::WRAP_ALGORITHM_NAME;
    }

/**
     * @inheritDoc
     */
    public function decryptCek($encryptedCek, $materialDescription, $options)
    {
        $params = [
            'CiphertextBlob' => $encryptedCek,
            'EncryptionContext' => $materialDescription
        ];
        if (empty($options['@KmsAllowDecryptWithAnyCmk'])) {
            if (empty($this->kmsKeyId)) {
                throw new CryptoException('KMS CMK ID was not specified and the'
                    . ' operation is not opted-in to attempting to use any valid'
                    . ' CMK it discovers. Please specify a CMK ID, or explicitly'
                    . ' enable attempts to use any valid KMS CMK with the'
                    . ' @KmsAllowDecryptWithAnyCmk option.');
            }
            $params['KeyId'] = $this->kmsKeyId;
        }

$result = $this->kmsClient->decrypt($params);
        return $result['Plaintext'];
    }

/**
     * @inheritDoc
     */
    public function generateCek($keySize, $context, $options)
    {
        if (empty($this->kmsKeyId)) {
            throw new CryptoException('A KMS key id is required for encryption'
                . ' with KMS keywrap. Use a KmsMaterialsProviderV2 that has been'
                . ' instantiated with a KMS key id.');
        }
        $options = array_change_key_case($options);
        if (!isset($options['@kmsencryptioncontext'])
            || !is_array($options['@kmsencryptioncontext'])
        ) {
            throw new CryptoException("'@KmsEncryptionContext' is a"
                . " required argument when using KmsMaterialsProviderV2, and"
                . " must be an associative array (or empty array).");
        }
        if (isset($options['@kmsencryptioncontext']['aws:x-amz-cek-alg'])) {
            throw new CryptoException("Conflict in reserved @KmsEncryptionContext"
                . " key aws:x-amz-cek-alg. This value is reserved for the S3"
                . " Encryption Client and cannot be set by the user.");
        }
        $context = array_merge($options['@kmsencryptioncontext'], $context);
        $result = $this->kmsClient->generateDataKey([
            'KeyId' => $this->kmsKeyId,
            'KeySpec' => "AES_{$keySize}",
            'EncryptionContext' => $context
        ]);
        return [
            'Plaintext' => $result['Plaintext'],
            'Ciphertext' => base64_encode($result['CiphertextBlob']),
            'UpdatedContext' => $context
        ];
    }
}

cmd: