Class TestBlobEncryptor
Factory for the framework's real AES-GCM ISecureBlobEncryptor backed by an InMemoryKeyStore, so blob round-trips in tests exercise the production encryptor (scope- and purpose-bound associated data, v2 stream format) without a master KEK or an on-disk key file.
public static class TestBlobEncryptor
- Inheritance
-
TestBlobEncryptor
- Inherited Members
Methods
CreateAesGcm()
Build an AES-GCM ISecureBlobEncryptor over a fresh InMemoryKeyStore.
public static ISecureBlobEncryptor CreateAesGcm()
Returns
- ISecureBlobEncryptor
A ready-to-use encryptor whose ciphertext decrypts only under the same scope + purpose.
CreateAesGcm(IKeyStore)
Build an AES-GCM ISecureBlobEncryptor over a caller-supplied IKeyStore.
public static ISecureBlobEncryptor CreateAesGcm(IKeyStore keyStore)
Parameters
keyStoreIKeyStoreThe key store the encryptor resolves DEKs from (e.g. a shared InMemoryKeyStore).
Returns
- ISecureBlobEncryptor
A ready-to-use encryptor bound to
keyStore.