ios - 如何将 AWS-S3 加密文件(AES-256 加密)读取到我的 IOS 应用程序中？

Question

我正在尝试从 AWS S3 存储桶获取加密文件，并在我的 IOS 应用程序中打开它。但我不确定如何在我的应用程序中打开加密文件。解密的步骤是什么？

Answer 1

我了解您正在使用 AWS 的内置服务器端加密。在这种情况下，数据会自动加密和解密，您不必担心解密和 key 管理

Amazon S3 Server Side Encryption handles all encryption, decryption, and key management in a totally transparent fashion. When you PUT an object and request encryption (in an HTTP header supplied as part of the PUT), we generate a unique key, encrypt your data with the key, and then encrypt the key with a master key.

Decryption of the encrypted data requires no effort on your part. When you GET an encrypted object, we fetch and decrypt the key, and then use it to decrypt your data. We also include an extra header in the response to the GET to let you know that the data was stored in encrypted form in Amazon S3.

引用:AWS Official Blog: Amazon S3 Server Side Encryption for Data at Rest

它还有一个很好的图表来描述流程。

希望这有帮助。