Had you and I come back now in today's video, we will be discussing about Kim's in a practical way,
so practical way basically means that we will be creating our own gear.
Minsky will look into the process of the entire creation of the key, and then we'll also look into
the overall encryption and decryption related functionality.
Now again, just before we start with our practical about games, it is important that the basic cryptographic
concepts are better and better.
So the two primary areas that you need to understand is the plain text and the safer text.
So plain text basically refers to anything that humans can understand and relate to.
For example, in this diagram, you have a plain text college knowledge portal and you supplied this
plain text to encryption algorithm.
And depending upon the encryption and you go to them, you get the corresponding safer text.
So this is the safer text audio cipher text is basically, as you're discussing it, a series of random
letters and numbers which humans cannot make sense of.
So you have a plain text on the left.
You have, say for text on the right and then you have the primary encryption algorithm, which is a
step by step approach that builds on how a plain text will be converted to safer text, as well as vice
versa.
Great.
So now let's go ahead and discuss about gimmes in a practical workflow.
Now there are three primary steps that are involved forces.
You need to create the customer magnets key, so this key will be responsible for performing the encryption
as well as the decryption operation for us.
So this is the first step.
Second step is you define the administrative, use it and the key user.
So who will be able to administer the key, administer the key?
Like who will be able to maybe let the delete the key or perform some administrative operation on the
key?
Then you have a key user.
Key user are the ones who will be using the key for me be encryption decryption related functionality,
but they do not really have administrative permission or other key.
So you can have two separate user, Royer.
So you see the admin user as Alice Key user as well.
So two different user and each has their different set of operations.
And then the third step lento two different admin.
And the key use it is, you go ahead and do it and greet and be group related operation with the Khimki
or the customer Magnitsky that you have created.
So this is a practical workflow.
Let's go ahead and I don't know.
Before we go ahead and create the CMG audio, let us first ensure that we have both the admin and the
user data available.
So within the Idolise management console, let's quickly go to the IEM service will go to users.
So this user is already available.
Let's go ahead and create one more user.
The name of the user will see as Bob will give password access.
Let's set the custom password here and we'll be select the password reset.
Let's do it.
Next may not really add any permissions right now.
We are just creating a user.
So two users are created.
One will be acting as an admin user.
Second will be acting as a user warrior.
And now we can go ahead and create a new CMG.
So from the search bar, you can type games, which is the key management service, and we didn't yet.
We are interested in the customer managed keys over here.
So currently, you see there are no keys that are available.
So let's go ahead and create that.
Now there are two types of etcetera available.
We'll be discussing about this in the relevant video.
However, we will keep it simple and we'll use this and.
Let's do a next.
Now you have to define the name of the key for simplicity.
Let's say epilepsy.
Alright, let's do a next.
Now, at this stage, you'll have to specify the key administrator.
So the key administrator will specify this, Alice.
And if you will see you also have option, which states allow the key administrator to delete this key.
Let's do a next.
Now you had the key usage permission will be giving the key users permission to more use it.
Let's do a next.
So now you'll see a review screen with the key policy that is automatically created.
Now, if you look into the policy associated with the user of Alice.
Alice has a lot of permissions.
Audiard, including the delete permission and the Bob user.
Bob Mueller also has basic operation permissions like encryption decryption.
But various other actions like Delete are not available for Bob user.
This is completely fine and expect.
Let's go ahead and create a.
Great.
So now you see a key is created.
And if you'll quickly open up this key, it basically gives you great detail associated on who is the
key administrator, who is the user.
And you can also go ahead and use it, as well as key administrator at a later stage once the key is
created.
Great.
So I forced to step are completed.
That third step is now pending with this encryption and b corruption of data with CMG.
Now for simplicity, what I have within my Clia, I already have access in secret key associated with
the admin user.
So if you go to AM console, let's go to users.
We also have a third user call as administrator user, so this is generally what they use for most of
the things, just for testing purposes.
And this user basically has their administrator access.
So this is basically the admin user of this account.
I already have the access and secret key of this user configured on mycelial and through this user,
we will be going ahead and performing some operations on this game is key.
Now, for this important part to note is that various operations like encryption, decryption and with
various other operations cannot directly be performed at a dual level, although that would be much
more cool.
But this is something that is not really supported here, so you will have to make use of the IWC L8
to perform these operations.
So currently I am within the IWC L.A. documentation associated with the Kimmich's service, and there
are various operations that you will be able to perform.
Or, you know, first simplistic one is the list is a very simple operation which shows you the list
of gear messages that are available in the region so you can see the games list keys and you can also
specify the region.
Let's say you have a game is created in a different region, which is US to S2.
In either case, you can explicitly define the region and currently you see it is basically showing
you that there is one key and this is the key idea available ending with seven c nine, so you can compare
it.
So this is the key and ending with seven C name.
No.
Let's go ahead and look into the encrypt operation.
So what we do?
Let's put for encrypt.
So you ever encrypt Operation Audio?
Let's look into how exactly the commands are, so under the synopsis, you have the IWC EMC, followed
by the encrypt and then you have various other things that you'll have to specify.
One is the key.
So this is the key that we see audio.
So this is a key idea that you'll have to specify and then you'll have to have to specify the plaintext
value.
In case this is confusing, you can always go a little down.
There are plenty of examples that you can make use of.
So let's go ahead and try it on.
So I'll CW schemes and group, followed by the kiddie circuit basically states.
Let's say that you have multiple keys in the same region, which you want to use for the encryption
operation.
So that is what you'll have to specify.
So we already have a key idea.
I'll copy this guide.
Let me be stricter here.
The next important part is this plain text file, basically the file from which the data will come from.
So let's copy this up.
I'll paste it.
And within here they have made a reference to a specific file, which is called example plain text file.
So now what you can do, you can go ahead within the part from which you are running the command.
You can create a simple file.
Let's do that.
So currently I am in the part of C Drive the users bureau.
So under C Drive users, Zalora what I do, I'll go ahead and create a new file.
Let's call it as plain haven text.
I will open this up and list this place if I hello.
Well, I'll say this and similar to the example that is specified with the file, you can specify the
name of the file from which the plaintext will be derived from.
So you can see if I'll be.
Blaine Haifeng takes note.
And at this stage, you basically are seeing an error stating that it is not existing, this error would
primarily come because you have not specified the region.
So the region in May of this year is configured as USC's one, but the key is created in a different
region, which is US west to.
I think so.
Now, if pricing did you see you're basically getting the output?
And the most important part here is this cipher text block.
As we were discussing in the theoretical section, a cipher takes is basically the encrypted data.
Whatever plain text using after encryption, you get a safer text.
So this is the safer text block that you are getting audio and also note that this is base64 encoded.
So if you want to look into how exactly this looks after you go ahead and remove the base64, this is
how does a full text block really looks like, so you will not be able to identify the plaintext from
it?
Alright, so this is the basics of encrypt operation.
Now the next important part is the decrypt operation.
So for Decrypt operation, let's go ahead and also search for it or it is already available.
Let's open this up and look into the Seelig command.
So you have E.W. schemas be correct, and all you'll have to do is you'll have to specify the ciphertext
block.
That's about it.
So let's quickly look into it.
So it's a E.W. scheme is be followed by this hypertext block, and all you'll have to do is you'll have
to copy this up and paste it.
Alright, let's play center again.
You'll have to specify the region if you have that you created in the US, the East.
When you don't have to do this, things would be much more straightforward.
But we are exploring all of the ways in which things can be messed up.
So in the output, yet you see you get the plain text again.
This plain text is the base 64, so you'll have to do a base 64 decoder.
So from any standard website like base 64 bit code dot wordy, you will just you can just specify the
plaintext data, just do the decode and you should see the halo oreate.
All right.
So this is the basics of the key aims practical workflow on how the encryption, as well as their decryption
related operation would work.
And with this will conclude today's video.