Skip to content

Releases: tillo/tink-java-ciphertrust

Release list

0.2.0

0.2.0 Latest
Latest

Choose a tag to compare

View all tags
@tillo tillo released this 10 Jul 21:14
v0.2.0
cfe1e91

First public release, available on Maven Central:

<dependency>
  <groupId>ch.tillo.tink</groupId>
  <artifactId>tink-ciphertrust</artifactId>
  <version>0.2.0</version>
</dependency>

Highlights

  • KmsClient/Aead for Thales CipherTrust Manager with ciphertrust://<host>/<key-name> key URIs, following the same factory pattern as the official awskms/gcpkms Tink extensions.
  • AES-GCM with associated data via the CipherTrust Manager REST API — no proprietary SDK required; works against the free Community Edition.
  • Key-rotation-safe ciphertext envelope: decryption addresses the KMS key by name and version, so rotating the key doesn't strand old ciphertexts.
  • Bounded transport: connect/request timeouts and bounded retries with exponential backoff (I/O errors and 502/503/504 only).
  • Credentials via environment or JSON file (password or refresh-token grant); withHttpClient() hook for private-CA truststores.
  • Java 11+, built against tink-java 1.21.0; runtime dependencies are only tink and gson.

Artifacts are signed with GPG key 7411868B8C33B15FB906669996F383B91D500D2B.

Assets 2
Loading