Hear you and welcome back now in today's video we'll be discussing about the E.W. scheme is no game.
It stands for key management service and the primary purpose of this service is to go ahead and allow
us to perform the encryption and decryption operation of the data.
So this can be better understood with this diagram very heavy user on the left hand side and the key
messages on the right side.
Now let's assume that the user has a sensitive data.
In this case it is password one two three four.
So once the user sends this password one two three four two games, games will go ahead and encrypted
data and will send encrypted data back to the user.
So instead of storing this sensitive data in his laptop, or maybe even sending this sensitive data
over various communication channels like Slack email address, the user can go ahead and instead send
the encrypted data over the communication channels.
So even if the attacker is able to fetch this, encrypted data will not be able to do anything unless
and until the attacker has the access to the Gear MSS service.
So that's the high level overview.
Let's go ahead and look into more detail.
So currently, I mean, the game is console and if you go to the customer, manage.
So these are the keys that I have created.
Now you're we have a geek or less a demo games guy.
And this guy is basically will be used for performing the encryption as well as their decryption operations
that we will be performing.
So for today's demo, let's go ahead and look into it a high level overview.
So for today's demo, I have a text file call this best dot and the contents of this test wireless password
is equal to one two three four.
And now we look into how we can encrypted data with the help of CMS.
Now, one important part to remember is that if you want to perform the encryption using kismet, you
do not really have any D-Wave perspective like you can go ahead and upload the data and CMS.
Will Gordons encrypt and give it to you?
You need to make use of ACLJ for that.
So I have a similar command for today's demo, so let's look into it.
So your idolise game is encrypt.
So gamers has multiple operations.
It can perform encryption, decryption and various ideas.
So we're saying we want to perform the encryption operation.
We have specified the key 80.
So this is the key, the audio.
So basically, we have multiple keys, savitsky we want to use for performing the encryption operation.
So this is where the key comes into picture and then what we are seeing, we are supplying a plain text
file, coalesce based dirty.
So if any good and pressing did you see in the output?
We have received a cipher text block.
So this is the same for text block and this is nothing but say for text data or the encrypted data.
So this encrypted data is what we have received from the CMS service.
Now, let's assume that after some amount of time, we have this encrypted data that is stored in that
laptop and we want to go ahead and decrypt it.
Or you have send this encrypted data to your friend who is within the same team and a friend wants to
go ahead and get the plaintext data.
So what Dufresne needs to do is he has to send this encrypted data again to the Kimmich's service and
provided he has the right set of permission on the key service.
The games will go ahead and send the decrypted data back.
Let's look into it.
So in order to go ahead and fetch W index data now you're seeing to it of this game is that this day
may want to do a decrypt operation.
And now you also have to supply the cipher text that you had received earlier.
So let's go ahead and update this.
So this is the cipher text that we had received earlier.
And now you see games has basically given as the plain text.
Now this plain text does not really look like the plain text that we had as part of the text file.
So within our taste for it to be password is equal to one two three four.
But this does not really look like that.
Now do note that when the game is sent as the plaintext data, this is basically a base 64 encoded data.
So what you need is you need a tool that can go ahead and decode that data.
Now, generally, Linux and Mac comes with the base 64 bit.
However, Windows does not really come by default would be 64.
Decode it.
So when Sue Gordon decoded, you should see it, Espie.
So it is equal to one two three four.
Great.
So I hope at a high level, what do you understand the basics of games now?
One of the great things about games is its integration with various eatables services.
Now, generally, the question that comes is, let's say you have large organizations who have thousands
of files.
Now, should they, Gordon, supply each file individually to games and get the encrypted content?
Not really.
Most of the organizations this two sensitive files in S3 bucket or in the EBS volumes, so games also
supports the integration with various services like say.
Debates and so on.
So if you have your files stored in a state budget or EBS volumes, gamers can go ahead and perform
the encryption as well as decryption that nobody in the game is can.
So if we look into the database managed keys, you see you have various keys associated with services
like SNES, S3, Cord, Commit, LightSail and various others, so multiple keys can be created depending
upon the services that are being used.
However, one thing to note all of these services are supported as part of the integration with gamers.
So you do not really need to worry about encrypting the individual files.
So that's a very high level of worry about games.
We did not really create the games from scratch and look into various configuration parameters.
This was a very high level of review based demo video to understand the games concept.
And with this will conclude today's video.