Interface IEncryptionFactory

Namespace

Stratara.Abstractions.Security

Assembly

Stratara.Abstractions.dll

Symmetric authenticated-encryption primitive (AES-GCM in the default impl). The associated-data parameter binds ciphertext to a context — typically the Subject tenant id / user id — to prevent ciphertext swapping across tenants.

public interface IEncryptionFactory

Extension Methods

FieldChangedEventExtensions.ApplyPropertyChanged<TAggregate>(TAggregate, FieldChangedEvent<TAggregate>)

EventStream.ApplyEvents(object, IReadOnlyList<IEvent>)

Methods

Decrypt(EncryptedData, ReadOnlySpan<byte>, ReadOnlySpan<byte>)

Decrypt data using key; the associated data must match what was used at encryption time.

byte[] Decrypt(EncryptedData data, ReadOnlySpan<byte> key, ReadOnlySpan<byte> additionalAuthenticatedData)

Parameters

data EncryptedData

key ReadOnlySpan<byte>

additionalAuthenticatedData ReadOnlySpan<byte>

Returns

byte[]

Exceptions

CryptographicException

Authentication tag verification failed (wrong key or AAD).

Encrypt(ReadOnlySpan<byte>, ReadOnlySpan<byte>, ReadOnlySpan<byte>)

Encrypt plaintext using key bound to associatedData.

EncryptedData Encrypt(ReadOnlySpan<byte> plaintext, ReadOnlySpan<byte> key, ReadOnlySpan<byte> associatedData)

Parameters

plaintext ReadOnlySpan<byte>

key ReadOnlySpan<byte>

associatedData ReadOnlySpan<byte>

Returns

EncryptedData