Layer7 API Management

  • Private Community

  • 1.  encrypt

    Posted Feb 26, 2019 03:55 PM

    Hi There,

    For compliance purpose,I want to encrypt an string i,e userID which receives as part of request and essentially I want to write this encrypted userId in to log to track the user logins.Looking for some light weight way of doing it which wont impact any performance decrease to the service.



  • 2.  Re: encrypt
    Best Answer

    Broadcom Employee
    Posted Feb 26, 2019 05:21 PM

    Dear PopleysYsb ,

    You may try Encode JSON Web Token Assertion - CA API Gateway - 9.4 - CA Technologies Documentation 

    There is other (tactical) assertion for encryption, but Encode JSON web token assertion is recommended.

     

    Regards,

    Mark



  • 3.  Re: encrypt

    Posted Feb 26, 2019 06:24 PM

    Hi Mark,here I didn't want to use any asymmetric keys(pub/private keys), i just want to encrypt using some AES 128 or 256 encryption, so that i can use that to decrypt back.

    I receive the userId in x-www-from-encoded basically as string.



  • 4.  Re: encrypt

    Broadcom Employee
    Posted Feb 26, 2019 07:16 PM
      |   view attached

    We have tactical assertion for  symmetric encryption/decryption, you can open a support ticket to ask for it.

    You should read the Tactical Crypto Assertion Warning first to understand the risk