IncomingDiffieHellmanTr31KeyBlock - AWS Payment Cryptography Data Plane

IncomingDiffieHellmanTr31KeyBlock

Parameter information of a TR31KeyBlock wrapped using an ECDH derived key.

Contents

CertificateAuthorityPublicKeyIdentifier

The keyArn of the certificate that signed the client's PublicKeyCertificate.

Type: String

Length Constraints: Minimum length of 7. Maximum length of 322.

Pattern: arn:aws:payment-cryptography:[a-z]{2}-[a-z]{1,16}-[0-9]+:[0-9]{12}:(key/[0-9a-zA-Z]{16,64}|alias/[a-zA-Z0-9/_-]+)$|^alias/[a-zA-Z0-9/_-]+

Required: Yes

DerivationData

The shared information used when deriving a key using ECDH.

Type: DiffieHellmanDerivationData object

Note: This object is a Union. Only one member of this object can be specified or returned.

Required: Yes

DeriveKeyAlgorithm

The key algorithm of the derived ECDH key.

Type: String

Valid Values: TDES_2KEY | TDES_3KEY | AES_128 | AES_192 | AES_256 | HMAC_SHA256 | HMAC_SHA384 | HMAC_SHA512 | HMAC_SHA224

Required: Yes

KeyDerivationFunction

The key derivation function to use for deriving a key using ECDH.

Type: String

Valid Values: NIST_SP800 | ANSI_X963

Required: Yes

KeyDerivationHashAlgorithm

The hash type to use for deriving a key using ECDH.

Type: String

Valid Values: SHA_256 | SHA_384 | SHA_512

Required: Yes

PrivateKeyIdentifier

The keyARN of the asymmetric ECC key pair.

Type: String

Length Constraints: Minimum length of 7. Maximum length of 322.

Pattern: arn:aws:payment-cryptography:[a-z]{2}-[a-z]{1,16}-[0-9]+:[0-9]{12}:(key/[0-9a-zA-Z]{16,64}|alias/[a-zA-Z0-9/_-]+)$|^alias/[a-zA-Z0-9/_-]+

Required: Yes

PublicKeyCertificate

The client's public key certificate in PEM format (base64 encoded) to use for ECDH key derivation.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 32768.

Pattern: [^\[;\]<>]+

Required: Yes

WrappedKeyBlock

The WrappedKeyBlock containing the transaction key wrapped using an ECDH dervied key.

Type: String

Length Constraints: Minimum length of 56. Maximum length of 9984.

Pattern: [0-9a-zA-Z]+

Required: Yes

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: