@aws-sdk/client-payment-cryptography-data 3.1138.0 → 3.1139.0

package/dist-cjs/index.js

@@ -69,7 +69,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1137.0";
+var version = "3.1138.0";
 var packageInfo = {
 	version: version};
 
@@ -1074,8 +1074,8 @@ var PinVerificationAttributes$ = [4, n0, _PVA,
 ];
 var ReEncryptionAttributes$ = [4, n0, _REA,
     0,
-    [_S, _D],
-    [[() => SymmetricEncryptionAttributes$, 0], [() => DukptEncryptionAttributes$, 0]]
+    [_S, _As, _D],
+    [[() => SymmetricEncryptionAttributes$, 0], () => AsymmetricEncryptionAttributes$, [() => DukptEncryptionAttributes$, 0]]
 ];
 var SessionKeyDerivation$ = [4, n0, _SKD,
     0,

package/dist-es/schemas/schemas_0.js

@@ -850,8 +850,8 @@ export var PinVerificationAttributes$ = [4, n0, _PVA,
 ];
 export var ReEncryptionAttributes$ = [4, n0, _REA,
     0,
-    [_S, _D],
-    [[() => SymmetricEncryptionAttributes$, 0], [() => DukptEncryptionAttributes$, 0]]
+    [_S, _As, _D],
+    [[() => SymmetricEncryptionAttributes$, 0], () => AsymmetricEncryptionAttributes$, [() => DukptEncryptionAttributes$, 0]]
 ];
 export var SessionKeyDerivation$ = [4, n0, _SKD,
     0,

package/dist-types/commands/ReEncryptDataCommand.d.ts

@@ -24,7 +24,7 @@ declare const ReEncryptDataCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
 };
 /**
- * <p>Re-encrypt ciphertext using DUKPT or Symmetric data encryption keys. </p> <p>You can either generate an encryption key within Amazon Web Services Payment Cryptography by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html">CreateKey</a> or import your own encryption key by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html">ImportKey</a>. The <code>KeyArn</code> for use with this operation must be in a compatible key state with <code>KeyModesOfUse</code> set to <code>Encrypt</code>. </p> <p>This operation also supports dynamic keys, allowing you to pass a dynamic encryption key as a TR-31 WrappedKeyBlock. This can be used when key material is frequently rotated, such as during every card transaction, and there is need to avoid importing short-lived keys into Amazon Web Services Payment Cryptography. To re-encrypt using dynamic keys, the <code>keyARN</code> is the Key Encryption Key (KEK) of the TR-31 wrapped encryption key material. The incoming wrapped key shall have a key purpose of D0 with a mode of use of B or D. For more information, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/use-cases-acquirers-dynamickeys.html">Using Dynamic Keys</a> in the <i>Amazon Web Services Payment Cryptography User Guide</i>.</p> <p>For symmetric and DUKPT encryption, Amazon Web Services Payment Cryptography supports <code>TDES</code> and <code>AES</code> algorithms. To encrypt using DUKPT, a DUKPT key must already exist within your account with <code>KeyModesOfUse</code> set to <code>DeriveKey</code> or a new DUKPT can be generated by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html">CreateKey</a>.</p> <p>For information about valid keys for this operation, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-validattributes.html">Understanding key attributes</a> and <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html">Key types for specific data operations</a> in the <i>Amazon Web Services Payment Cryptography User Guide</i>. </p> <p> <b>Cross-account use</b>: This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html">Resource-based policies</a>.</p> <p> <b>Related operations:</b> </p> <ul> <li> <p> <a>DecryptData</a> </p> </li> <li> <p> <a>EncryptData</a> </p> </li> <li> <p> <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetPublicKeyCertificate.html">GetPublicCertificate</a> </p> </li> <li> <p> <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html">ImportKey</a> </p> </li> </ul>
+ * <p>Re-encrypts ciphertext using DUKPT, symmetric, or asymmetric data encryption keys. </p> <p>You can either generate an encryption key within Amazon Web Services Payment Cryptography by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html">CreateKey</a> or import your own encryption key by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html">ImportKey</a>. The <code>KeyArn</code> for use with this operation must be in a compatible key state with <code>KeyModesOfUse</code> set to <code>Encrypt</code>. </p> <p>This operation also supports dynamic keys, allowing you to pass a dynamic encryption key as a TR-31 WrappedKeyBlock. This can be used when key material is frequently rotated, such as during every card transaction, and there is need to avoid importing short-lived keys into Amazon Web Services Payment Cryptography. To re-encrypt using dynamic keys, the <code>keyARN</code> is the Key Encryption Key (KEK) of the TR-31 wrapped encryption key material. The incoming wrapped key shall have a key purpose of D0 with a mode of use of B or D. For more information, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/use-cases-acquirers-dynamickeys.html">Using Dynamic Keys</a> in the <i>Amazon Web Services Payment Cryptography User Guide</i>.</p> <p>Amazon Web Services Payment Cryptography supports the following encryption key schemes:</p> <ul> <li> <p> <b>DUKPT</b>: <code>TDES</code> and <code>AES</code> algorithms. To encrypt using DUKPT, a DUKPT key must already exist within your account with <code>KeyModesOfUse</code> set to <code>DeriveKey</code> or a new DUKPT can be generated by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html">CreateKey</a>.</p> </li> <li> <p> <b>Symmetric</b>: <code>TDES</code> and <code>AES</code> algorithms.</p> </li> <li> <p> <b>Asymmetric</b>: <code>RSA</code>. You can use an <code>RSA</code> key on either the incoming or the outgoing side, paired with a symmetric key on the other side.</p> </li> </ul> <p>For information about valid keys for this operation, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-validattributes.html">Understanding key attributes</a> and <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html">Key types for specific data operations</a> in the <i>Amazon Web Services Payment Cryptography User Guide</i>. </p> <p> <b>Cross-account use</b>: This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html">Resource-based policies</a>.</p> <p> <b>Related operations:</b> </p> <ul> <li> <p> <a>DecryptData</a> </p> </li> <li> <p> <a>EncryptData</a> </p> </li> <li> <p> <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetPublicKeyCertificate.html">GetPublicCertificate</a> </p> </li> <li> <p> <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html">ImportKey</a> </p> </li> </ul>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -43,6 +43,9 @@ declare const ReEncryptDataCommand_base: {
  *       InitializationVector: "STRING_VALUE",
  *       PaddingType: "PKCS1" || "OAEP_SHA1" || "OAEP_SHA256" || "OAEP_SHA512",
  *     },
+ *     Asymmetric: { // AsymmetricEncryptionAttributes
+ *       PaddingType: "PKCS1" || "OAEP_SHA1" || "OAEP_SHA256" || "OAEP_SHA512",
+ *     },
  *     Dukpt: { // DukptEncryptionAttributes
  *       KeySerialNumber: "STRING_VALUE", // required
  *       Mode: "ECB" || "CBC",
@@ -57,6 +60,9 @@ declare const ReEncryptDataCommand_base: {
  *       InitializationVector: "STRING_VALUE",
  *       PaddingType: "PKCS1" || "OAEP_SHA1" || "OAEP_SHA256" || "OAEP_SHA512",
  *     },
+ *     Asymmetric: {
+ *       PaddingType: "PKCS1" || "OAEP_SHA1" || "OAEP_SHA256" || "OAEP_SHA512",
+ *     },
  *     Dukpt: {
  *       KeySerialNumber: "STRING_VALUE", // required
  *       Mode: "ECB" || "CBC",

package/dist-types/models/models_0.d.ts

@@ -2549,26 +2549,38 @@ export declare namespace OutgoingKeyMaterial {
  * <p>Parameters that are required to perform reencryption operation.</p>
  * @public
  */
-export type ReEncryptionAttributes = ReEncryptionAttributes.DukptMember | ReEncryptionAttributes.SymmetricMember | ReEncryptionAttributes.$UnknownMember;
+export type ReEncryptionAttributes = ReEncryptionAttributes.AsymmetricMember | ReEncryptionAttributes.DukptMember | ReEncryptionAttributes.SymmetricMember | ReEncryptionAttributes.$UnknownMember;
 /**
  * @public
  */
 export declare namespace ReEncryptionAttributes {
     /**
-     * <p>Parameters that are required to encrypt data using symmetric keys.</p>
+     * <p>Specifies the parameters required to encrypt data using symmetric keys.</p>
      * @public
      */
     interface SymmetricMember {
         Symmetric: SymmetricEncryptionAttributes;
+        Asymmetric?: never;
         Dukpt?: never;
         $unknown?: never;
     }
     /**
-     * <p>Parameters that are required to encrypt plaintext data using DUKPT.</p>
+     * <p>Specifies the parameters required to encrypt data using an asymmetric key pair. You must specify a <code>PaddingType</code>.</p>
+     * @public
+     */
+    interface AsymmetricMember {
+        Symmetric?: never;
+        Asymmetric: AsymmetricEncryptionAttributes;
+        Dukpt?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Specifies the parameters required to encrypt data using DUKPT.</p>
      * @public
      */
     interface DukptMember {
         Symmetric?: never;
+        Asymmetric?: never;
         Dukpt: DukptEncryptionAttributes;
         $unknown?: never;
     }
@@ -2577,6 +2589,7 @@ export declare namespace ReEncryptionAttributes {
      */
     interface $UnknownMember {
         Symmetric?: never;
+        Asymmetric?: never;
         Dukpt?: never;
         $unknown: [string, any];
     }
@@ -2586,6 +2599,7 @@ export declare namespace ReEncryptionAttributes {
      */
     interface Visitor<T> {
         Symmetric: (value: SymmetricEncryptionAttributes) => T;
+        Asymmetric: (value: AsymmetricEncryptionAttributes) => T;
         Dukpt: (value: DukptEncryptionAttributes) => T;
         _: (name: string, value: any) => T;
     }

package/dist-types/ts3.4/models/models_0.d.ts

@@ -1111,27 +1111,38 @@ export declare namespace OutgoingKeyMaterial {
   }
 }
 export type ReEncryptionAttributes =
+  | ReEncryptionAttributes.AsymmetricMember
   | ReEncryptionAttributes.DukptMember
   | ReEncryptionAttributes.SymmetricMember
   | ReEncryptionAttributes.$UnknownMember;
 export declare namespace ReEncryptionAttributes {
   interface SymmetricMember {
     Symmetric: SymmetricEncryptionAttributes;
+    Asymmetric?: never;
+    Dukpt?: never;
+    $unknown?: never;
+  }
+  interface AsymmetricMember {
+    Symmetric?: never;
+    Asymmetric: AsymmetricEncryptionAttributes;
     Dukpt?: never;
     $unknown?: never;
   }
   interface DukptMember {
     Symmetric?: never;
+    Asymmetric?: never;
     Dukpt: DukptEncryptionAttributes;
     $unknown?: never;
   }
   interface $UnknownMember {
     Symmetric?: never;
+    Asymmetric?: never;
     Dukpt?: never;
     $unknown: [string, any];
   }
   interface Visitor<T> {
     Symmetric: (value: SymmetricEncryptionAttributes) => T;
+    Asymmetric: (value: AsymmetricEncryptionAttributes) => T;
     Dukpt: (value: DukptEncryptionAttributes) => T;
     _: (name: string, value: any) => T;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-payment-cryptography-data",
-  "version": "3.1138.0",
+  "version": "3.1139.0",
   "description": "AWS SDK for JavaScript Payment Cryptography Data Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-payment-cryptography-data",
   "license": "Apache-2.0",