| 51 | } |
| 52 | |
| 53 | SecureString DecryptKeyLocally(const std::string& encoded_encrypted_key, |
| 54 | const SecureString& master_key, const std::string& aad) { |
| 55 | PARQUET_ASSIGN_OR_THROW(auto encrypted_key, |
| 56 | ::arrow::util::base64_decode(encoded_encrypted_key)); |
| 57 | |
| 58 | AesDecryptor key_decryptor(ParquetCipher::AES_GCM_V1, |
| 59 | static_cast<int>(master_key.size()), false, |
| 60 | false /*contains_length*/); |
| 61 | |
| 62 | int32_t decrypted_key_len = |
| 63 | key_decryptor.PlaintextLength(static_cast<int>(encrypted_key.size())); |
| 64 | SecureString decrypted_key(decrypted_key_len, '\0'); |
| 65 | |
| 66 | decrypted_key_len = key_decryptor.Decrypt(str2span(encrypted_key), master_key.as_span(), |
| 67 | str2span(aad), decrypted_key.as_span()); |
| 68 | |
| 69 | return decrypted_key; |
| 70 | } |
| 71 | |
| 72 | bool ValidateKeyLength(int32_t key_length_bits) { |
| 73 | int32_t* found_key_length = std::find( |