Your suggested change has been received. Thank you.

close

Suggest A Change

https://thales.na.market.dpondemand.io/docs/dpod/services/kmo….

Thales Logo

All

  • All
back

Traditional APIs Tasks

Encrypt/Decrypt Email (Masking Domain)

search

Please Note:

Encrypt/Decrypt Email (Masking Domain)

Encrypting Email

  1. Create an NAESession object. Pass Key Manager username and password as arguments.

  2. Obtain an instance of the key you want to use for the encryption operation.

  3. Get EmailDomainFormat from FPEFormat.

  4. Set the start and end values.

  5. Create FPEParameterAndFormatSpec with EmailDomainFormat.

  6. Create a cipher encryptCipher and initialize it with ENCRYPT_MODE, key, and FPEParameterAndFormatSpec.

  7. Call the doFinal on encryptCipher to obtain the masked email.

Code sample

This sample shows how to encrypt email address.

String dataToEncryptEmail = "steve_johnson@sample.com"; 
NAESession session = NAESession.getSession(username, password.toCharArray());
NAEKey key = NAEKey.getSecretKey(keyName, session);
FPEFormat formatEmail = FPEFormat.getEmailDomainFormat();
formatEmail.setNumberOfElementsBeforeEnd(2);
formatEmail.setNumberOfElementsFromStart(2);
FPEParameterAndFormatSpec paramSpec = new FPEParameterAndFormatBuilder(tweakData).set_tweakAlgorithm(tweakAlgo).setFpeFormat(formatEmail).build();
Cipher encryptCipher = Cipher.getInstance("FPE/AES/CARD62", "IngrianProvider");
encryptCipher.init(Cipher.ENCRYPT_MODE, key, paramSpec);
byte[] maskedEmail = encryptCipher.doFinal(dataToEncryptEmail.getBytes());

Output

stotn_boesvon@sample.com

Decrypting Email

  1. Create an NAESession object. Pass Key Manager username and password as arguments.

  2. Obtain an instance of the key you want to use for the decryption operation.

  3. Get EmailDomainFormat from FPEFormat.

  4. Set the start and end values.

  5. Create FPEParameterAndFormatSpec with EmailDomainFormat.

  6. Create a cipher decryptCipher and initialize it with ENCRYPT_MODE, key, and FPEParameterAndFormatSpec.

  7. Call the doFinal on decryptCipher to obtain the masked email.

Code sample

This sample shows how to decrypt email address.

String dataToDecryptEmail = "stotn_boesvon@sample.com"; 
NAESession session = NAESession.getSession(username, password.toCharArray());
NAEKey key = NAEKey.getSecretKey(keyName, session);
FPEFormat formatEmail = FPEFormat.getEmailDomainFormat();
formatEmail.setNumberOfElementsBeforeEnd(2);
formatEmail.setNumberOfElementsFromStart(2);
FPEParameterAndFormatSpec paramSpec = new FPEParameterAndFormatBuilder(tweakData).set_tweakAlgorithm(tweakAlgo).setFpeFormat(formatEmail).build();
Cipher decryptCipher = Cipher.getInstance("FPE/AES/CARD62", "IngrianProvider");
decryptCipher.init(Cipher.DECRYPT_MODE, key, paramSpec);
byte[] maskedEmail = decryptCipher.doFinal(dataToEncryptEmail.getBytes());

Output

steve_johnson@sample.com

References

  • The sample for Masking domain in email addresses algorithm is available on Github.

On this page