Package br.com.seedgrid.privacy

Class CryptoProvider

java.lang.Object

br.com.seedgrid.privacy.CryptoProvider

public final class CryptoProvider
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ENCRYPTION_ENABLED_PROPERTY	Propriedade que liga/desliga a criptografia at-rest dos @EncryptedField.

Method Summary

Modifier and Type	Method	Description
static void	configure(CryptoService cryptoService)
static void	configureNormalizer(ValueNormalizer normalizer)
static void	configureSearchHashService(SearchHashService searchHashService)
static CryptoService	getCryptoService()
static ValueNormalizer	getNormalizer()
static SearchHashService	getSearchHashService()
static EncryptedFieldSearch	getSecureSearch()
static boolean	isEncryptionEnabled()	A criptografia at-rest esta ligada?
static Optional<CryptoProperties>	loadConfiguredProperties()
static boolean	looksEncrypted(String value)	Um valor ja cifrado por esta lib?
static void	resetForTests()
static void	setEncryptionEnabledForTests(boolean enabled)	Liga/desliga a criptografia programaticamente (apenas testes).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ENCRYPTION_ENABLED_PROPERTY

public static final String ENCRYPTION_ENABLED_PROPERTY

Propriedade que liga/desliga a criptografia at-rest dos @EncryptedField. Default: desligado.

See Also:

• Constant Field Values

Method Details

isEncryptionEnabled

public static boolean isEncryptionEnabled()

A criptografia at-rest esta ligada? Decide pela propriedade ENCRYPTION_ENABLED_PROPERTY (default false) — a menos que um override de teste tenha sido setado.

Modo agnostico (default, desligado): os @EncryptedField gravam o valor cru no banco e o campo de hash de busca fica null; a busca se da pelo campo normal. A aplicacao consumidora NAO precisa configurar chave nenhuma.

Modo cifrado (ligado): exige seedgrid.crypto.key e seedgrid.search.key configuradas — se faltar, o boot/persist falha (fail-closed: pega erro de config no deploy, em vez de gravar PII em claro silenciosamente).

looksEncrypted

public static boolean looksEncrypted(String value)

Um valor ja cifrado por esta lib? Checagem por prefixo de versao — NAO exige chave.

configure

public static void configure(CryptoService cryptoService)

configureSearchHashService

public static void configureSearchHashService(SearchHashService searchHashService)

configureNormalizer

public static void configureNormalizer(ValueNormalizer normalizer)

getCryptoService

public static CryptoService getCryptoService()

getSearchHashService

public static SearchHashService getSearchHashService()

getNormalizer

public static ValueNormalizer getNormalizer()

getSecureSearch

public static EncryptedFieldSearch getSecureSearch()

setEncryptionEnabledForTests

public static void setEncryptionEnabledForTests(boolean enabled)

Liga/desliga a criptografia programaticamente (apenas testes). Sobrepoe a config.

resetForTests

public static void resetForTests()

loadConfiguredProperties

public static Optional<CryptoProperties> loadConfiguredProperties()