Overview (SDK for Java)

Updated on 2025-04-03 GMT+08:00

View PDF

OBS provides server-side encryption for objects, so that they will be encrypted or decrypted when you upload them to or download them from a bucket.

The encryption and decryption happen on the server side.

There are different encryption methods for you to choose from.

With SSE-KMS, OBS uses the keys provided by Key Management Service (KMS) for server-side encryption. You can create custom keys for SSE-KMS encryption.

With SSE-C, OBS uses the keys and MD5 values of the keys provided by customers for server-side encryption.

When server-side encryption is used, the returned ETag value is not the object's MD5 value. OBS will verify the object's MD5 value as long as the upload request includes the Content-MD5 header, no matter whether server-side encryption is used or not.

When server-side encryption is used, you are advised to use HTTPS to transmit and receive data.

For more information, see Server-Side Encryption.

Parent topic: Server-Side Encryption (SDK for Java)

Previous topic: Server-Side Encryption (SDK for Java)

Next topic: Server-Side Encryption APIs (SDK for Java)