kms

type DecryptRequest struct {

	// ciphertext is the wrapped key material to unwrap. It carries whatever the
	// provider needs to locate the key that produced it.
	Ciphertext []byte `protobuf:"bytes,1,opt,name=ciphertext,proto3" json:"ciphertext,omitempty"`
	// contains filtered or unexported fields
}

type DecryptResponse struct {

	// plaintext is the original key material recovered from the request's
	// ciphertext.
	Plaintext []byte `protobuf:"bytes,1,opt,name=plaintext,proto3" json:"plaintext,omitempty"`
	// contains filtered or unexported fields
}

type EncryptRequest struct {

	// namespace is the pre-translation (local) namespace the DEK belongs to. A
	// provider may use it to select a per-namespace wrapping key.
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// plaintext is the key material to wrap (a DEK in the proxy's envelope
	// encryption scheme).
	Plaintext []byte `protobuf:"bytes,2,opt,name=plaintext,proto3" json:"plaintext,omitempty"`
	// contains filtered or unexported fields
}

type EncryptResponse struct {

	// ciphertext is the wrapped form of the request's plaintext. It should carry
	// whatever the provider needs to later identify the wrapping key, so that
	// Decrypt can unwrap it.
	Ciphertext []byte `protobuf:"bytes,1,opt,name=ciphertext,proto3" json:"ciphertext,omitempty"`
	// contains filtered or unexported fields
}

type EncryptionServiceClient interface {
	// Encrypt wraps the supplied key material and returns its ciphertext. The
	// namespace selects which key the provider wraps with, letting a single
	// provider serve per-namespace keys.
	Encrypt(ctx context.Context, in *EncryptRequest, opts ...grpc.CallOption) (*EncryptResponse, error)
	// Decrypt unwraps ciphertext previously produced by Encrypt and returns the
	// original key material. The ciphertext is expected to be self-describing so
	// the provider can identify the key that produced it.
	Decrypt(ctx context.Context, in *DecryptRequest, opts ...grpc.CallOption) (*DecryptResponse, error)
}

type EncryptionServiceServer interface {
	// Encrypt wraps the supplied key material and returns its ciphertext. The
	// namespace selects which key the provider wraps with, letting a single
	// provider serve per-namespace keys.
	Encrypt(context.Context, *EncryptRequest) (*EncryptResponse, error)
	// Decrypt unwraps ciphertext previously produced by Encrypt and returns the
	// original key material. The ciphertext is expected to be self-describing so
	// the provider can identify the key that produced it.
	Decrypt(context.Context, *DecryptRequest) (*DecryptResponse, error)
	// contains filtered or unexported methods
}

type UnimplementedEncryptionServiceServer struct{}

type UnsafeEncryptionServiceServer interface {
	// contains filtered or unexported methods
}