Package org.acemq.amqp.crypto

@NullMarked package org.acemq.amqp.crypto

Payload encryption, for messages the broker itself should not be able to read.

TLS protects a message while it is moving and does nothing about one sitting in a queue that an operator, a backup or the management UI can read. Where that matters, the message has to arrive already encrypted, and a Codec is the seam for it: the last thing to touch the bytes going out and the first coming in.

Class	Description
EncryptedCodec	Encrypts whatever another codec produced, so the broker holds ciphertext.
EncryptionKey	A key and the name messages will refer to it by.
Keyring	The keys a service can write with and the keys it can read with.
Keyring.Builder	Collects keys for a Keyring that does not change while the process runs.
Keyring.StaticKeyring	A keyring over a fixed map.
Keys	Getting an AES key from the shapes one usually arrives in.