For decrypting sensitive data using a GPK previously stored on SAKA, the web service call requires the following parameters:
DID |
The unique encryption domain identifier. This is a numeric integer that logically represents the context within which the GPK is stored. |
username |
The encryption domain username with the authorization to call this web service. |
password |
The password of the username to authenticate the credential of the requester. |
gpktoken |
The token of the GPK. |
ciphertext |
The encrypted data that must be decrypted. |
encoding |
The encoding in which to process this transaction. Valid values are Hex and Base64. The iv and ciphertext parameters must be encoded in this format. |
algorithm |
The algorithm transform to use for this decryption. The transform must be in the form of “algorithm/mode/padding”. |
iv |
An Initialization Vector to be used for this decryption. For ECB mode decryption, the iv should be null. |
aad |
The Additional Authenticated Data which can be included in GCM mode decryptions. This value can be null, even in GCM mode (in which case AAD is not required). |
Upon decrypting the data, SAKA returns UTF-8-encoded plaintext to the calling application.