Skip to main content

Data cryptography

Encrypting, decrypting and MACing data through a key server session.

OperationAuthPurpose
GET /api/v1/crypto/cipherBearer + DPoPThe cipher this session currently uses.
POST /api/v1/crypto/cipherBearer + DPoPSelect the cipher for this session.
POST /api/v1/crypto/encryptBearer + DPoPEncrypt data, optionally minting a new key.
POST /api/v1/crypto/decryptBearer + DPoPDecrypt data.
POST /api/v1/crypto/hmacBearer + DPoPThe keyed data hash -- HMAC-SHA384 under a key the key server holds.