Help Center> Data Encryption Workshop> User Guide> Key Management Service> Using the Online Tool to Encrypt and Decrypt Small-Size Data
View PDF

Using the Online Tool to Encrypt and Decrypt Small-Size Data

This section describes how to use the online tool to encrypt or decrypt small-size data (4 KB or smaller) on the KMS console.

Constraints

  • Default keys cannot be used to encrypt or decrypt such data with the tool.
  • Asymmetric keys cannot be used to encrypt or decrypt such data with the tool.
  • You can call an API to use a default key to encrypt or decrypt small volumes of data. For details, see the Data Encryption Workshop API Reference.
  • Use the current CMK to encrypt the data.
  • Exercise caution when you delete a CMK. The online tool cannot decrypt data if the CMK used for encryption has been deleted.

Encrypting Data

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click . Choose Security & Compliance > Data Encryption Workshop.
  1. Click the alias of a custom key to view its details, and go to the online tool for data encryption and decryption.
  2. Click Encrypt. In the text box on the left, enter the data to be encrypted. For details, see Figure 1.

    Figure 1 Encrypting data

  3. Click Execute. Ciphertext of the data is displayed in the text box on the right.

    • Use the current CMK to encrypt the data.
    • You can click Clear to clear the entered data.
    • You can click Copy to Clipboard to copy the ciphertext and save it in a local file.

Decrypting Data

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click . Choose Security & Compliance > Data Encryption Workshop.
  1. You can click any non-default key in Enabled status to go to the encryption and decryption page of the online tool.
  2. Click Decrypt. In the text box on the left, enter the data to be decrypted. For details, see Figure 2.

    • The tool will identify the original encryption CMK and use it to decrypt the data.
    • However, if the CMK has been deleted, the decryption fails.
    Figure 2 Decrypting data

  3. Click Execute. Plaintext of the data is displayed in the text box on the right.

    You can click Copy to Clipboard to copy the plaintext and save it in a local file.

Parent topic: Key Management Service