de.saly.kafka.crypto

Class DecryptingDeserializer<T>

java.lang.Object

de.saly.kafka.crypto.SerdeCryptoBase

de.saly.kafka.crypto.DecryptingDeserializer<T>

Type Parameters:

T - The type to be deserialized from (applied to the wrapped deserializer)

All Implemented Interfaces:

org.apache.kafka.common.serialization.Deserializer<T>

public class DecryptingDeserializer<T>
extends SerdeCryptoBase
implements org.apache.kafka.common.serialization.Deserializer<T>

This is a deserialization (for the Consumer) wrapper which adds transparent end-to-end message encryption. Its intended to be used together with EncryptingSerializer

Configuration

• crypto.rsa.privatekey.filepath path on the local filesystem which hold the RSA private key (PKCS#8 format) of the consumer
• crypto.wrapped_deserializer is the class or full qualified class name or the wrapped deserializer
• crypto.ignore_decrypt_failures Skip message decryption on error and just pass the byte[] unencrypted (optional, default is "false"). Possible values are "true" or "false".

See EncryptingSerializer on how encryption works.

This class will auto detect if an incoming message is encrypted. If not then no decryption attempt is made and message gets handled normally.

Note: As Consumers are not multithreading-safe this deserializer is also not thread-safe

Field Summary

Fields

Modifier and Type	Field and Description
static String	CRYPTO_VALUE_DESERIALIZER

Fields inherited from class de.saly.kafka.crypto.SerdeCryptoBase

CRYPTO_AES_KEY_LEN, CRYPTO_HASH_METHOD, CRYPTO_IGNORE_DECRYPT_FAILURES, CRYPTO_RSA_PRIVATEKEY_FILEPATH, CRYPTO_RSA_PUBLICKEY_FILEPATH, DEFAULT_TRANSFORMATION

Constructor Summary

Constructors

Constructor and Description
DecryptingDeserializer()

Method Summary

Modifier and Type	Method and Description
void	close()
void	configure(Map<String,?> configs, boolean isKey)
T	deserialize(String topic, byte[] data)

Methods inherited from class de.saly.kafka.crypto.SerdeCryptoBase

concatenate, crypt, init, newInstance, newKey

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CRYPTO_VALUE_DESERIALIZER

public static final String CRYPTO_VALUE_DESERIALIZER

See Also:

Constant Field Values

Constructor Detail

DecryptingDeserializer

public DecryptingDeserializer()

Method Detail

configure

public void configure(Map<String,?> configs,
                      boolean isKey)

Specified by:

configure in interface org.apache.kafka.common.serialization.Deserializer<T>

deserialize

public T deserialize(String topic,
                     byte[] data)

Specified by:

deserialize in interface org.apache.kafka.common.serialization.Deserializer<T>

close

public void close()

Specified by:

close in interface org.apache.kafka.common.serialization.Deserializer<T>