Package org.apache.iceberg.encryption

Interface Summary

Interface	Description
EncryptedInputFile	Thin wrapper around an InputFile instance that is encrypted.
EncryptedOutputFile	Thin wrapper around a OutputFile that is encrypting bytes written to the underlying file system, via an encryption key that is symbolized by the enclosed EncryptionKeyMetadata.
EncryptionKeyMetadata	Light typedef over a ByteBuffer that indicates that the given bytes represent metadata about an encrypted data file's encryption key.
EncryptionManager	Module for encrypting and decrypting table data files.
KmsClient	Deprecated the API will be removed in v2.0.0 (replaced with KeyManagementClient interface).
NativeEncryptionInputFile	An EncryptedInputFile that can be used for format-native encryption.
NativeEncryptionKeyMetadata	EncryptionKeyMetadata for use with format-native encryption.
NativeEncryptionOutputFile	An EncryptedOutputFile that can be used for format-native encryption.
NativelyEncryptedFile	This interface is applied to OutputFile and InputFile implementations, in order to enable delivery of crypto parameters (such as encryption keys etc) from the Iceberg key management module to the writers/readers of file formats that support encryption natively (Parquet and ORC).

Class Summary

Class	Description
AesGcmInputFile
AesGcmInputStream
AesGcmOutputFile
AesGcmOutputStream
Ciphers
Ciphers.AesGcmDecryptor
Ciphers.AesGcmEncryptor
EncryptedFiles
EncryptingFileIO
EncryptionKeyMetadatas
EncryptionUtil
InputFilesDecryptor
KmsClient.KeyGenerationResult	For KMS systems that support key generation, this class keeps the key generation result - the raw secret key, and its wrap.
NativeFileCryptoParameters	Barebone encryption parameters, one object per content file.
NativeFileCryptoParameters.Builder
PlaintextEncryptionManager
StandardEncryptionManager

Enum Summary

Enum	Description
EncryptionAlgorithm	Algorithm supported for file encryption.