Skip to content

azure-security-keyvault-keys_4.3.0
Compare
Choose a tag to compare
@azure-sdk azure-sdk released this 18 Jun 23:37
azure-security-keyvault-keys_4.3.0
b2931f9
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

4.3.0 (2021-06-17)

Features Added

  • Changed default service version to 7.2.
  • Added KeyVaultKeyIdentifier to parse key URLs.
  • Added local-only support for CryptographyClient and CryptographyAsyncClient by providing a JsonWebKey during client creation.
  • Added KeyType.OCT-HSM to support oct-HSM key operations to support Managed HSM.
  • Added the CreateOctKeyOptions class and associated createOctKey() methods.
  • Added AES-GCM and AES-CBC support for encrypting and decrypting, including new Encrypt and Decrypt overloads.
  • Added the ability to set a public exponent on RSA keys during creation.
  • Made all getters for properties of a JsonWebKey public.

Changes since 4.3.0-beta.8

Bug Fixes

  • Ensured that RetryPolicy and HttpLogOptions use a default implementation when creating Key Vault clients if not set or set to null.

New Features

  • Added createOctKey() and createOctKeyWithResponse() to KeyClient and KeyAsyncClient.
  • Added factory methods for RSA algorithms in DecryptParameters and EncryptParameters:
    • createRsa15Parameters()
    • createRsaOaepParameters()
    • createRsaOaep256Parameters()

Breaking Changes

  • Removed EXPORT from the KeyOperation enum.
  • Re-ordered parameters in the EncryptResult constructor to show authenticationTag before additionalAuthenticatedData to align with classes like DecryptParameters.
  • Removed service method overloads that take a pollingInterval, since PollerFlux and SyncPoller objects allow for setting this value directly on them.
  • Moved EncryptParameters and DecryptParameters from the cryptography package to the cryptography.models package and made them both final.

Non-Breaking

  • Renamed keyId to sourceId in KeyVaultKeyIdentifier.
  • KeyVaultKeyIdentifier can now be used to parse any Key Vault identifier.
  • Added the @ServiceMethod annotation to all public methods that call the Key Vault service in KeyClient, KeyAsyncClient, CryptographyClient and CryptographyAsyncClient.
Assets 2