| Interface | Description |
|---|---|
| EncryptedInputFile |
Thin wrapper around an
InputFile instance that is encrypted. |
| EncryptedOutputFile |
Thin wrapper around a
OutputFile that is encrypting bytes written to the underlying file
system, via an encryption key that is symbolized by the enclosed EncryptionKeyMetadata. |
| EncryptionKeyMetadata |
Light typedef over a ByteBuffer that indicates that the given bytes represent metadata about an
encrypted data file's encryption key.
|
| EncryptionManager |
Module for encrypting and decrypting table data files.
|
| KmsClient | Deprecated
the API will be removed in v2.0.0 (replaced with KeyManagementClient interface).
|
| NativelyEncryptedFile |
This interface is applied to OutputFile and InputFile implementations, in order to enable
delivery of crypto parameters (such as encryption keys etc) from the Iceberg key management
module to the writers/readers of file formats that support encryption natively (Parquet and ORC).
|
| Class | Description |
|---|---|
| Ciphers | |
| Ciphers.AesGcmDecryptor | |
| Ciphers.AesGcmEncryptor | |
| EncryptedFiles | |
| EncryptionKeyMetadatas | |
| InputFilesDecryptor | |
| KmsClient.KeyGenerationResult |
For KMS systems that support key generation, this class keeps the key generation result - the
raw secret key, and its wrap.
|
| NativeFileCryptoParameters |
Barebone encryption parameters, one object per content file.
|
| NativeFileCryptoParameters.Builder | |
| PlaintextEncryptionManager |
| Enum | Description |
|---|---|
| EncryptionAlgorithm |
Algorithm supported for file encryption.
|