Index

A

aesgcm_decrypt() (in module gemstone_utils.crypto) aesgcm_encrypt() (in module gemstone_utils.crypto) alg (gemstone_utils.types.KeyContext attribute) (gemstone_utils.types.KeyRecord attribute)

allowed_file_path_prefixes() (in module gemstone_utils.experimental.secrets_resolver) app_reencrypt_pending (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyKdf attribute)

B

b64decode() (in module gemstone_utils.crypto)

b64encode() (in module gemstone_utils.crypto) BackendNotImplemented

C

cache_ok (gemstone_utils.sqlalchemy.encrypted_type.EncryptedString attribute) canary_wrapped (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyKdf attribute)

candidate_id (gemstone_utils.election.ElectionCandidate attribute) created_at (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyKdf attribute) (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyRecord attribute)

D

data_alg (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyRecord attribute) decrypt_alg() (in module gemstone_utils.crypto) decrypt_impl (gemstone_utils.crypto.SymAlgSpec attribute) decrypt_string() (in module gemstone_utils.encrypted_fields)

decrypt_with_alg() (in module gemstone_utils.crypto) DEFAULT_PBKDF2_ITERATIONS_STRONG (in module gemstone_utils.crypto) derive_and_verify_kek() (in module gemstone_utils.key_mgmt) derive_kek() (in module gemstone_utils.key_mgmt.registry) derive_pbkdf2_hmac_sha256() (in module gemstone_utils.crypto)

E

elect() (in module gemstone_utils.election) ElectionCandidate (class in gemstone_utils.election) ElectionLeader (class in gemstone_utils.election) encrypt_alg() (in module gemstone_utils.crypto) encrypt_impl (gemstone_utils.crypto.SymAlgSpec attribute)

encrypt_string() (in module gemstone_utils.encrypted_fields) encrypt_with_alg() (in module gemstone_utils.crypto) encrypted_key (gemstone_utils.types.KeyRecord attribute) EncryptedString (class in gemstone_utils.sqlalchemy.encrypted_type) expires_at (gemstone_utils.election.ElectionCandidate attribute)

F

FilePathNotAllowed

format_encrypted_field() (in module gemstone_utils.encrypted_fields)

G

gemstone_utils.crypto module gemstone_utils.db module gemstone_utils.election module gemstone_utils.encrypted_fields module gemstone_utils.experimental.secrets_resolver module gemstone_utils.key_id module gemstone_utils.key_mgmt module gemstone_utils.key_mgmt.kdf.pbkdf2 module gemstone_utils.key_mgmt.registry module

gemstone_utils.sqlalchemy.encrypted_type module gemstone_utils.sqlalchemy.key_storage module gemstone_utils.sqlalchemy.lazy_secret module gemstone_utils.types module GemstoneDB (class in gemstone_utils.db) GemstoneKeyKdf (class in gemstone_utils.sqlalchemy.key_storage) GemstoneKeyRecord (class in gemstone_utils.sqlalchemy.key_storage) generate_key_by_alg() (in module gemstone_utils.crypto) get() (gemstone_utils.sqlalchemy.lazy_secret.LazySecret method) get_kdf_params() (in module gemstone_utils.sqlalchemy.key_storage) get_session() (in module gemstone_utils.db) get_wrapped() (in module gemstone_utils.sqlalchemy.key_storage)

H

heartbeat() (in module gemstone_utils.election)

I

impl (gemstone_utils.sqlalchemy.encrypted_type.EncryptedString attribute) init() (in module gemstone_utils.key_mgmt) init_db() (in module gemstone_utils.db) is_active (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyRecord attribute) is_backend_registered() (in module gemstone_utils.experimental.secrets_resolver)

is_encrypted_prefix() (in module gemstone_utils.encrypted_fields) is_leader() (in module gemstone_utils.election) is_supported_kdf() (in module gemstone_utils.key_mgmt.registry) is_supported_sym_alg() (in module gemstone_utils.crypto) iter_kek_slots() (in module gemstone_utils.sqlalchemy.key_storage) iter_wrapped_rows() (in module gemstone_utils.sqlalchemy.key_storage)

K

KEKVerificationError key (gemstone_utils.types.KeyContext attribute) key_id (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyKdf attribute) (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyRecord attribute) key_length (gemstone_utils.crypto.SymAlgSpec attribute)

KeyContext (class in gemstone_utils.types) keyid (gemstone_utils.types.KeyContext attribute) (gemstone_utils.types.KeyRecord attribute) KeyRecord (class in gemstone_utils.types) keyrecord_to_wire() (in module gemstone_utils.sqlalchemy.key_storage)

L

last_heartbeat_at (gemstone_utils.election.ElectionCandidate attribute) LazySecret (class in gemstone_utils.sqlalchemy.lazy_secret) leader_id (gemstone_utils.election.ElectionLeader attribute) lease_expires_at (gemstone_utils.election.ElectionLeader attribute)

list_backends() (in module gemstone_utils.experimental.secrets_resolver) list_candidates() (in module gemstone_utils.election) load_keyctx() (in module gemstone_utils.key_mgmt) load_passphrase() (in module gemstone_utils.key_mgmt)

M

make_kek_check_record() (in module gemstone_utils.key_mgmt) make_keyctx_resolver() (in module gemstone_utils.sqlalchemy.key_storage) metadata (gemstone_utils.db.GemstoneDB attribute) module gemstone_utils.crypto gemstone_utils.db gemstone_utils.election gemstone_utils.encrypted_fields gemstone_utils.experimental.secrets_resolver gemstone_utils.key_id gemstone_utils.key_mgmt gemstone_utils.key_mgmt.kdf.pbkdf2 gemstone_utils.key_mgmt.registry gemstone_utils.sqlalchemy.encrypted_type gemstone_utils.sqlalchemy.key_storage gemstone_utils.sqlalchemy.lazy_secret gemstone_utils.types

N

NAME (in module gemstone_utils.key_mgmt.kdf.pbkdf2) new_kdf_params() (in module gemstone_utils.sqlalchemy.key_storage) new_key_id() (in module gemstone_utils.key_id)

normalize_key_id() (in module gemstone_utils.key_id) ns (gemstone_utils.election.ElectionCandidate attribute) (gemstone_utils.election.ElectionLeader attribute)

P

params (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyKdf attribute) (gemstone_utils.types.KeyRecord attribute) parse_encrypted_field() (in module gemstone_utils.encrypted_fields)

pbkdf2_params() (in module gemstone_utils.key_mgmt.kdf.pbkdf2) process_bind_param() (gemstone_utils.sqlalchemy.encrypted_type.EncryptedString method) process_result_value() (gemstone_utils.sqlalchemy.encrypted_type.EncryptedString method) put_keyrecord() (in module gemstone_utils.sqlalchemy.key_storage)

R

RECOMMENDED_DATA_ALG (in module gemstone_utils.crypto) recommended_data_alg() (in module gemstone_utils.crypto) recommended_kdf_params() (in module gemstone_utils.key_mgmt) recommended_pbkdf2_params() (in module gemstone_utils.key_mgmt.kdf.pbkdf2) reencrypt_keys() (in module gemstone_utils.key_mgmt) register_backend() (in module gemstone_utils.experimental.secrets_resolver) register_candidate() (in module gemstone_utils.election) register_kdf() (in module gemstone_utils.key_mgmt.registry) registry (gemstone_utils.db.GemstoneDB attribute)

require_supported_kdf() (in module gemstone_utils.key_mgmt.registry) require_supported_sym_alg() (in module gemstone_utils.crypto) resolve_env() (in module gemstone_utils.experimental.secrets_resolver) resolve_file() (in module gemstone_utils.experimental.secrets_resolver) resolve_literal() (in module gemstone_utils.experimental.secrets_resolver) resolve_secret() (in module gemstone_utils.experimental.secrets_resolver) resolve_secretfile() (in module gemstone_utils.experimental.secrets_resolver) rewrap_key_records() (in module gemstone_utils.sqlalchemy.key_storage) rotate_kek() (in module gemstone_utils.key_mgmt)

S

set_allowed_file_path_prefixes() (in module gemstone_utils.experimental.secrets_resolver) set_app_reencrypt_pending() (in module gemstone_utils.sqlalchemy.key_storage) set_current_keyctx() (gemstone_utils.sqlalchemy.encrypted_type.EncryptedString class method) set_expire() (in module gemstone_utils.election) set_kdf_params() (in module gemstone_utils.sqlalchemy.key_storage) set_kek_canary() (in module gemstone_utils.sqlalchemy.key_storage)

set_keyctx_resolver() (gemstone_utils.sqlalchemy.encrypted_type.EncryptedString class method) (in module gemstone_utils.experimental.secrets_resolver) SUPPORTED_KDF_NAMES (in module gemstone_utils.key_mgmt.registry) SUPPORTED_SYM_ALGS (in module gemstone_utils.crypto) sym_alg_key_length() (in module gemstone_utils.crypto) SymAlgSpec (class in gemstone_utils.crypto)

U

unregister_backend() (in module gemstone_utils.experimental.secrets_resolver) unregister_candidate() (in module gemstone_utils.election) unwrap_key() (in module gemstone_utils.key_mgmt)

unwrap_stored_key() (in module gemstone_utils.sqlalchemy.key_storage) updated_at (gemstone_utils.election.ElectionLeader attribute) (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyKdf attribute) (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyRecord attribute)

V

validate_sym_params (gemstone_utils.crypto.SymAlgSpec attribute)

verify_kek() (in module gemstone_utils.key_mgmt)

W

wire_to_keyrecord() (in module gemstone_utils.sqlalchemy.key_storage) wire_wrap() (in module gemstone_utils.sqlalchemy.key_storage)

wrap_key() (in module gemstone_utils.key_mgmt) wrapped (gemstone_utils.sqlalchemy.key_storage.GemstoneKeyRecord attribute)