The Encryption SDK for Python now uses the AWS Cryptographic Material Providers Library. The MPL abstracts lower level cryptographic materials management of encryption and decryption materials.
This directory contains migration examples for:
- Moving to Keyrings from Master Key Providers:
- Migration example to AWS KMS keyring from AWS KMS Master Key Provider.
- Migration example to Raw AES keyring from Raw AES Master Key Provider.
- Migration example to Raw RSA keyring from Raw RSA Master Key Provider.
- Migration to newer versions of the ESDK (4.x+) from 1.x versions:
- Setting a 'CommitmentPolicy' during migration - If you have messages encrypted with 1.x versions of the ESDK (i.e. not using key commitment) and want to migrate to encrypt with key commitment using the keyring providers introduced in ESDK 4.x, this example will guide you on how to decrypt those messages using the new version of the ESDK.