Help Center> Object Storage Service> SDK Reference> PHP> Server-Side Encryption> Example of Encryption
View PDF

Example of Encryption

If you have any questions during development, post them on the Issues page of GitHub. For details about parameters and usage of each API, see the API Reference

Encrypting an Object to Be Uploaded

Sample code:

// Import the dependency library.
require 'vendor/autoload.php';
// Import the SDK code library during source code installation.
// require 'obs-autoloader.php';
// Declare the namespace.
use Obs\ObsClient;
// Create an instance of ObsClient.
$obsClient = new ObsClient ( [ 
       'key' => '*** Provide your Access Key ***',
       'secret' => '*** Provide your Secret Key ***',
       'endpoint' => 'https://your-endpoint'
] );
    
$resp = $obsClient->putObject ( [ 
       'Bucket' => 'bucketname',
       'Key' => 'objectname',
       'SourceFile' => 'localfile', 
        // Set the SSE-C encryption algorithm.  
       'SseC' => 'AES256',       
       'SseCKey' => 'your sse-c key generated by AES-256 algorithm'
] );
printf ( "RequestId:%s\n", $resp ['RequestId'] );

$resp = $obsClient->putObject ( [ 
       'Bucket' => 'bucketname',
       'Key' => 'objectname2',
       'SourceFile' => 'localfile2',    
       // Set the SSE-KMS encryption algorithm.   
       'SseKms' => 'kms'
] );
printf ( "RequestId:%s\n", $resp ['RequestId'] );

Decrypting a Downloaded Object

Sample code:

// Import the dependency library.
require 'vendor/autoload.php';
// Import the SDK code library during source code installation.
// require 'obs-autoloader.php';
// Declare the namespace.
use Obs\ObsClient;
// Create an instance of ObsClient.
$obsClient = new ObsClient ( [ 
       'key' => '*** Provide your Access Key ***',
       'secret' => '*** Provide your Secret Key ***',
       'endpoint' => 'https://your-endpoint'
] );

$resp = $obsClient->getObject ( [ 
       'Bucket' => 'bucketname',
       'Key' => 'objectname',   
       // Set the SSE-C decryption algorithm.    
       'SseC' => 'AES256',
        // The key used here must be the one used for uploading the object.
       'SseCKey' => 'your sse-c key generated by AES-256 algorithm'
] );
printf ( "RequestId:%s\n", $resp ['RequestId'] );
printf("Object Content:\n");
// Obtain the object content.
echo $resp ['Body'];
Parent topic: Server-Side Encryption