InternalAlgorithm configuration
Whether the algorithm provides Authenticated Encryption with Associated Data. AEAD algorithms (like AES-GCM) provide both confidentiality and integrity.
Required IV length in bytes (e.g., 12 for GCM, 16 for CBC)
Required key length in bits (e.g., 256 for AES-256)
Display name of the algorithm (e.g., 'AES-256-GCM')
Node.js crypto module algorithm identifier (e.g., 'aes-256-gcm')
The encryption key's unique identifier (UUID)
Current version of the key for this configuration. Incremented during key rotation operations.
Prefix marker for encrypted values. Defaults to '$ENC$' but can be customized per key.
Key source configuration for retrieving key material
The registered class name of the key source provider. Used with ClassFactory to instantiate the provider.
The lookup value passed to the key source. Interpretation depends on the source type.
Complete key configuration loaded from the database.
This structure contains everything needed to perform encryption or decryption operations, cached for performance.
Used by EncryptionEngine for key management