1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
//------------------------------------------------------------------------------
// <copyright file="SqlException.cs" company="Microsoft">
// Copyright (c) Microsoft Corporation. All rights reserved.
// </copyright>
// <owner current="true" primary="true">balnee</owner>
// <owner current="true" primary="false">krishnib</owner>
//------------------------------------------------------------------------------
namespace System.Data.SqlClient
{
using System;
/// <summary>
/// Abstract base class for all column encryption Key Store providers. It exposes two functions
/// 1. DecryptColumnEncryptionKey - This is the function used by SqlClient under the covers to decrypt encrypted column encryption key blob.
/// 2. EncryptColumnEncryptionKey - This will be used by client tools that generate DDL for customers
/// </summary>
public abstract class SqlColumnEncryptionKeyStoreProvider
{
/// <summary>
/// This function must be implemented by the corresponding Key Store providers. This function should use an asymmetric key identified by the key path
/// and decrypt an encrypted column encryption key with a given encryption algorithm.
/// </summary>
/// <param name="masterKeyPath">Complete path of an asymmetric key. Path format is specific to a key store provider.</param>
/// <param name="encryptionAlgorithm">Asymmetric Key Encryption Algorithm</param>
/// <param name="encryptedColumnEncryptionKey">Encrypted Column Encryption Key</param>
/// <returns>Plain text column encryption key</returns>
public abstract byte[] DecryptColumnEncryptionKey(string masterKeyPath, string encryptionAlgorithm, byte[] encryptedColumnEncryptionKey);
/// <summary>
/// This function must be implemented by the corresponding Key Store providers. This function should use an asymmetric key identified by a key path
/// and encrypt a plain text column encryption key with a given asymmetric key encryption algorithm.
/// </summary>
/// <param name="keyPath">Complete path of an asymmetric key. Path format is specific to a key store provider.</param>
/// <param name="encryptionAlgorithm">Asymmetric Key Encryption Algorithm</param>
/// <param name="columnEncryptionKey">Plain text column encryption key to be encrypted</param>
/// <returns>Encrypted column encryption key</returns>
public abstract byte[] EncryptColumnEncryptionKey(string masterKeyPath, string encryptionAlgorithm, byte[] columnEncryptionKey);
}
}
|
