检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Creating a Key Pair Dedicated Hardware Security Module (Dedicated HSM) Dedicated HSM enables data encryption on the cloud, specifically, encrypting and decrypting data, verifying signature, generating keys, and storing keys.
For details about how to encrypt and decrypt a DEK for a user application, see sections "Encrypting a DEK" and "Decrypting a DEK" in Data Encryption Workshop API Conference. Parent Topic: Creating a Key
Symmetric keys are suitable for encrypting and decrypting data. Asymmetric key ECC EC_P256 EC_P384 Elliptic curve recommended by NIST Digital signature and signature verification Asymmetric key ML-DSA NOTE: To enable the ML-DSA algorithm, submit a service ticket.
Preparations Before encrypting data in OBS, register a Huawei Cloud account and enable Huawei Cloud services. For details, see Signing Up for a HUAWEI ID and Enabling Huawei Cloud Services. If you have enabled Huawei Cloud, skip this step.
Symmetric keys are suitable for encrypting and decrypting data. Asymmetric key ECC EC_P256 EC_P384 Elliptic curve recommended by NIST Digital signature and signature verification Asymmetric key ML-DSA NOTE: To enable the ML-DSA algorithm, submit a service ticket.
Table 2 Encrypting the generated key material using the downloaded wrapping key Wrapping Key Algorithm Key Material Encryption RSAES_OAEP_SHA_256 openssl pkeyutl -in PlaintextKeyMaterial.bin -inkey PublicKey.bin -out EncryptedKeyMaterial.bin -keyform der -pubin -encrypt -pkeyopt rsa_padding_mode
If the specified key ID and encryption algorithm do not match those used for encrypting data, the decryption fails. Calling Method For details, see Calling APIs.
Encrypting a DEK Use a specified CMK to encrypt a DEK. Decrypting a DEK Use a specified CMK to decrypt a DEK.
Decrypting a DEK Function This API is used to decrypt DEKs using specified CMKs. Calling Method For details, see Calling APIs. URI POST /v1.0/{project_id}/kms/decrypt-datakey Table 1 Path Parameters Parameter Mandatory Type Description project_id Yes String Project ID Request Parameters
-Progressive Knowledge|HUAWEI CLOUD
How Is RDS Encryption Billed? Currently, RDS calls the EVS APIs for encryption purposes. KMS is called when an EVS disk is created or mounted. Data writing and reading do not call KMS. Generally, the number of times that EVS calls the KMS APIs does not exceed 20,000, which is free
Using the Encryption SDK to Encrypt and Decrypt Local Files You can use certain algorithms to encrypt your files, protecting them from being breached or tampered with. Encryption SDK is a client password library that can encrypt and decrypt data and file streams. You can easily encrypt
