检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Encrypt a DEK Function This API is used to encrypt a DEK using a specified CMK. Calling Method For details, see Calling APIs.
Encrypt data Function This API is used to encrypt data using a specified CMK. Constraints If you use an asymmetric key for encryption, record the key ID and encryption algorithm, which are required for decryption.
Symmetric Encrypt/Decrypt The symmetric encrypt/decrypt processor is used to encrypt plaintext and decrypt ciphertext by using the specified symmetric encryption algorithm.
Asymmetric Encrypt/Decrypt The asymmetric encrypt/decrypt processor is used to encrypt plaintext and decrypt ciphertext by using the specified asymmetric encryption algorithm. Configuration Parameters Parameter Description Private Key Base64-encoded, mandatory for decryption.
For example, the encryption results of the following functions are the same: encrypt(data, 'fooz', 'bf') encrypt(data, 'fooz', 'bf-cbc/pad:pkcs') For the encrypt_iv and decrypt_iv functions, the iv parameter indicates the initial value for the CBC mode.
Using KMS to Encrypt Offline Data Encrypting or Decrypting Small Volumes of Data Encrypting or Decrypting a Large Amount of Data Parent topic: Key Management Service
Using the Encryption SDK to Encrypt and Decrypt Local Files You can use certain algorithms to encrypt your files, protecting them from being breached or tampered with. Encryption SDK is a client password library that can encrypt and decrypt data and file streams.
How Do I Encrypt Transcoded Videos Using HLS? HLS encryption is performed during transcoding. To encrypt transcoded videos using HLS, you need to transcode the videos again and enable Encryption in the transcoding template. For details, see Transcoding Settings.
Constraints Default keys cannot be used to encrypt or decrypt such data with the tool. Asymmetric keys cannot be used to encrypt or decrypt such data with the tool. You can call an API to use a default key to encrypt or decrypt small volumes of data.
Using KMS to Encrypt and Decrypt Data for Cloud Services Overview Encrypting Data in ECS Encrypting Data in OBS Encrypting Data in EVS Encrypting Data in IMS Encrypting an RDS DB Instance Encrypting a DDS DB Instance Parent topic: Key Management Service
Will OBS Server-Side Encryption Encrypt My Existing Objects That Are Unencrypted? No. No. OBS encrypts only objects that are uploaded after the server-side encryption configuration is effective. If you want to encrypt existing objects, delete them and upload them again.
What Techniques Can I Use to Encrypt Data on OBS? Before uploading your data to OBS, you can encrypt the data to ensure security during transmission and storage. OBS has no restrictions on client encryption techniques.
Can I Encrypt the Disk After Purchasing a GaussDB Instance? You can enable disk encryption when purchasing a GaussDB instance. For details, see Buying a DB Instance. After an instance is created, the disk encryption status and the key cannot be changed.
How Do I Use Agent to Encrypt AK/SK? Secret Access Key (SK) is sensitive information.
How Do I Use the Online Tool to Encrypt or Decrypt Small Volumes of Data? You can use the online tool to encrypt or decrypt data in the following procedures: Encrypting Data Log in to the management console.
Using VPN to Encrypt Data over Direct Connect Lines Overview Planning Networks and Resources Configuring Direct Connect Configuring VPN Verification Parent topic: S2C Enterprise Edition VPN
When creating an ECS, you can encrypt added data disks.
As a result, CMKs do not directly encrypt and decrypt data. When you use a Huawei Cloud service to encrypt data, you need to specify a CMK on KMS. The Huawei Cloud service generates a plaintext DEK and a ciphertext DEK.
Parent topic: Using VPN to Encrypt Data over Direct Connect Lines
Encrypting or Decrypting a Large Amount of Data Scenario If you want to encrypt or decrypt large volumes of data, such as pictures, videos, and database files, you can use envelope encryption, which allows you to encrypt and decrypt files without having to transfer a large amount
