...When PUT or CLOBBER is not specified, fields that are present in the record may not be passed down to the encryptor, which results in fields being left out of the record signature. This in turn can result in records failing to decrypt. For more advanced use cases where tighter control over the encryption and signing process is necessary, the low-level DynamoDBEncryptor can be used directly.
FIDO strong authentication, encryption, digital signature engine
StrongKey CryptoEngine (SKCE) 2.0 is a "crypto Swiss Army knife" server to perform cryptographic functions through web services, while freeing application developers to focus on business functionality. Its modules include:
- A FIDO Engine to support FIDO U2F key registrations/authentications
- An encryption engine to encrypt/decrypt files using AES/TDES keys
- Escrowing keys to on-premises key management system (StrongAuth KeyAppliance/SAKA)
- Integration to cloud storage services...