Product Documentation

For decrypting sensitive data using a GPK previously stored on SAKA, the web service call requires the following parameters:

DID

The unique encryption domain identifier. This is a numeric integer that logically represents the context within which the GPK is stored.

username

The encryption domain username with the authorization to call this web service.

password

The password of the username to authenticate the credential of the requester.

gpktoken

The token of the GPK.

ciphertext

The encrypted data that must be decrypted.

encoding

The encoding in which to process this transaction. Valid values are Hex and Base64. The iv and ciphertext parameters must be encoded in this format.

algorithm

The algorithm transform to use for this decryption. The transform must be in the form of “algorithm/mode/padding”.

iv

An Initialization Vector to be used for this decryption. For ECB mode decryption, the iv should be null.

aad

The Additional Authenticated Data which can be included in GCM mode decryptions. This value can be null, even in GCM mode (in which case AAD is not required).

Upon decrypting the data, SAKA returns UTF-8-encoded plaintext to the calling application.