forked from docs/doc-exports
zhangyue
a51a411ad8
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com> Co-authored-by: zhangyue <zhangyue164@huawei.com> Co-committed-by: zhangyue <zhangyue164@huawei.com>
17 lines
1.2 KiB
HTML
17 lines
1.2 KiB
HTML
<a name="obs_04_0105"></a><a name="obs_04_0105"></a>
|
|
|
|
<h1 class="topictitle1">Server-Side Encryption Overview</h1>
|
|
<div id="body1537844085645"><p class="msonormal" id="obs_04_0105__p59403302">You can configure server-side encryption for objects, so that they will be encrypted or decrypted when you upload them to or download them from a bucket.</p>
|
|
<p class="msonormal" id="obs_04_0105__p64867670">The encryption and decryption happen on the server side.</p>
|
|
<p class="msonormal" id="obs_04_0105__p46938119">The encryption methods provided include SSE-KMS and SSE-C. All of them use the AES-256 algorithm.</p>
|
|
<p class="msonormal" id="obs_04_0105__p19789890">With SSE-KMS, OBS uses the keys provided by KMS for server-side encryption. You can create custom keys on KMS to encrypt your objects.</p>
|
|
<p class="msonormal" id="obs_04_0105__p43891289">With SSE-C, OBS uses the keys and MD5 values provided by customers for server-side encryption.</p>
|
|
<p class="msonormal" id="obs_04_0105__p59477283">When server-side encryption is used, the returned ETag value is not the object's MD5 value. </p>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_04_0104.html">Server-Side Encryption</a></div>
|
|
</div>
|
|
</div>
|
|
|