1*504e23b7SAndrei Pozolotin# 2*504e23b7SAndrei Pozolotin# Sample Amazon S3 connection configuration file, Version 2. 3*504e23b7SAndrei Pozolotin# Version 2 will produce JGitV2 compatible encryption. 4*504e23b7SAndrei Pozolotin# JGitV2 introduces more flexible control over cipher and key factory parameters. 5*504e23b7SAndrei Pozolotin# JGitV2 hides actual cipher/key algorithms inside the encryption profile. 6*504e23b7SAndrei Pozolotin# JGitV2 does not use any hard coded encryption parameters. 7*504e23b7SAndrei Pozolotin# JGitV2 supports both PBE and Non-PBE algorithms. 8*504e23b7SAndrei Pozolotin 9*504e23b7SAndrei Pozolotinaccesskey = AKIAIYWXB4ETREBRM123 10*504e23b7SAndrei Pozolotinsecretkey = ozCuIsqxsARoPe3FFyv3F/jiMSc3Yqay7B9UF234 11*504e23b7SAndrei Pozolotin 12*504e23b7SAndrei Pozolotin# In Version 2 "crypto.algorithm" is a reference to the encryption "profile". 13*504e23b7SAndrei Pozolotincrypto.algorithm = custom 14*504e23b7SAndrei Pozolotincrypto.version = 2 15*504e23b7SAndrei Pozolotinpassword = secret 16*504e23b7SAndrei Pozolotin 17*504e23b7SAndrei Pozolotin# 18*504e23b7SAndrei Pozolotin# Encryption profile is a collection of related properties, 19*504e23b7SAndrei Pozolotin# all having common property root name, or prefix: 20*504e23b7SAndrei Pozolotin# 21*504e23b7SAndrei Pozolotin# Cipher algorithm. 22*504e23b7SAndrei Pozolotincustom.algo = AES/CBC/PKCS5Padding 23*504e23b7SAndrei Pozolotin# Key factory algorithm. 24*504e23b7SAndrei Pozolotincustom.key.algo = PBKDF2WithHmacSHA512 25*504e23b7SAndrei Pozolotin# Key size, bits. 26*504e23b7SAndrei Pozolotincustom.key.size = 256 27*504e23b7SAndrei Pozolotin# Number of key generation iterations. 28*504e23b7SAndrei Pozolotincustom.key.iter = 50000 29*504e23b7SAndrei Pozolotin# Salt used in key generation (hex value, white space OK). 30*504e23b7SAndrei Pozolotincustom.key.salt = e2 55 89 67 8e 8d e8 4c 31*504e23b7SAndrei Pozolotin 32*504e23b7SAndrei Pozolotin# Same file can store multiple profiles. 33*504e23b7SAndrei Pozolotin# Only one profile can be active at a time. 34*504e23b7SAndrei Pozolotin# Active profile is selected via "crypto.algorithm" 35*504e23b7SAndrei Pozolotin 36*504e23b7SAndrei Pozolotin# 37*504e23b7SAndrei Pozolotin# Here is how to create V1 encryption in V2 format: 38*504e23b7SAndrei Pozolotin# 39*504e23b7SAndrei Pozolotin# Cipher algorithm. 40*504e23b7SAndrei Pozolotinlegacy.algo = PBEWithHmacSHA1AndAES_128 41*504e23b7SAndrei Pozolotin# Key factory algorithm. 42*504e23b7SAndrei Pozolotinlegacy.key.algo = PBEWithHmacSHA1AndAES_128 43*504e23b7SAndrei Pozolotin# Key size, bits. 44*504e23b7SAndrei Pozolotinlegacy.key.size = 32 45*504e23b7SAndrei Pozolotin# Number of key generation iterations. 46*504e23b7SAndrei Pozolotinlegacy.key.iter = 5000 47*504e23b7SAndrei Pozolotin# Salt used in key generation (hex value, white space OK). 48*504e23b7SAndrei Pozolotinlegacy.key.salt = A40BC834D695F313 49