DirectoryKeyProvider is not supported

[arezki1990]

Hi ,
i am trying to use this lib with client side key-pair but unfortunately i don't find the directory provider

[mattsb42-aws]

Hi @arezki1990,

What you're looking for is RawMasterKey[1]. You'll need a WrappingKey[2] to construct it. The API for RawMasterKey is...not the best thing I've ever done... :/

We're working on replacing master keys in general with keyrings[3], which among many other things will make the configuration story for the equivalent keyring MUCH better. We don't have a real timeline for that yet, but we should be starting work back up on that soon.

In the meantime, you can find some examples of constructing a RawMasterKey here[4] and a RawMasterKeyProvider here[5] (though you'll presumably want to actually retrieve the master key materials from somewhere, not generate ephemeral master key materials).

[1] https://aws-encryption-sdk-python.readthedocs.io/en/latest/generated/aws_encryption_sdk.key_providers.raw.html
[2] https://aws-encryption-sdk-python.readthedocs.io/en/latest/generated/aws_encryption_sdk.internal.crypto.wrapping_keys.html#aws_encryption_sdk.internal.crypto.wrapping_keys.WrappingKey
[3] #146
[4]

aws-encryption-sdk-python/test/functional/key_providers/test_base.py

Lines 94 to 102 in d6c39a7

	return RawMasterKey(
	provider_id=_PROVIDER_ID,
	key_id=_key["key_id"],
	wrapping_key=WrappingKey(
	wrapping_algorithm=WrappingAlgorithm.AES_256_GCM_IV12_TAG16_NO_PADDING,
	wrapping_key=_key["wrapping_key"],
	wrapping_key_type=EncryptionKeyType.SYMMETRIC,
	),
	)

[5]

aws-encryption-sdk-python/examples/src/basic_file_encryption_with_raw_key_provider.py

Lines 23 to 48 in 7498baf

	class StaticRandomMasterKeyProvider(RawMasterKeyProvider):
	"""Randomly generates 256-bit keys for each unique key ID."""
	provider_id = "static-random"
	def __init__(self, **kwargs): # pylint: disable=unused-argument
	"""Initialize empty map of keys."""
	self._static_keys = {}
	def _get_raw_key(self, key_id):
	"""Returns a static, randomly-generated symmetric key for the specified key ID.
	:param str key_id: Key ID
	:returns: Wrapping key that contains the specified static key
	:rtype: :class:`aws_encryption_sdk.internal.crypto.WrappingKey`
	"""
	try:
	static_key = self._static_keys[key_id]
	except KeyError:
	static_key = os.urandom(32)
	self._static_keys[key_id] = static_key
	return WrappingKey(
	wrapping_algorithm=WrappingAlgorithm.AES_256_GCM_IV12_TAG16_NO_PADDING,
	wrapping_key=static_key,
	wrapping_key_type=EncryptionKeyType.SYMMETRIC,
	)

[seebees]

I think that this question has been answered.
If you need something else feel free to reopen @arezki1990.