pkg syscall (netbsd-arm64-cgo), const ETHERTYPE_ECMA = 2051
pkg syscall (netbsd-arm64-cgo), const ETHERTYPE_ECMA ideal-int
pkg syscall (netbsd-arm64-cgo), const ETHERTYPE_ENCRYPT = 32829
pkg syscall (netbsd-arm64-cgo), const ETHERTYPE_ENCRYPT ideal-int
pkg syscall (netbsd-arm64-cgo), const ETHERTYPE_ES = 32861
pkg syscall (netbsd-arm64-cgo), const ETHERTYPE_ES ideal-int

#### Encryption at Rest
* [alpha] Encrypt secrets stored in etcd. For more information, see [Securing a Cluster](https://kubernetes.io/docs/tasks/administer-cluster/securing-a-cluster/) and [Encrypting data at rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).

#### Node Authorization

        cipher.init(Cipher.DECRYPT_MODE, sk, params);

        byte[] result;
        result = cipher.doFinal(data);

        decrypt = new byte[result.length];
        System.arraycopy(result, 0, decrypt, 0, result.length);

        int tempSize = decrypt.length - 24;

        byte[] output = new byte[tempSize];
        System.arraycopy(decrypt, 24, output, 0, tempSize);

- Encryption of API Server at rest configuration now allows the use of wildcards in the list of resources.  For example, *.* can be used to encrypt all resources, including all current and future custom resources. ([#115149](https://github.com/kubernetes/kubernetes/pull/115149), [@nilekhc](https://github.com/nilekhc))

pkg syscall (netbsd-386), const ETHERTYPE_DOGFIGHT ideal-int
pkg syscall (netbsd-386), const ETHERTYPE_DSMD ideal-int
pkg syscall (netbsd-386), const ETHERTYPE_ECMA ideal-int
pkg syscall (netbsd-386), const ETHERTYPE_ENCRYPT ideal-int
pkg syscall (netbsd-386), const ETHERTYPE_ES ideal-int
pkg syscall (netbsd-386), const ETHERTYPE_EXCELAN ideal-int
pkg syscall (netbsd-386), const ETHERTYPE_EXPERDATA ideal-int

	if err != nil {
		t.Fatalf("Failed to generate key: %v", err)
	}
	plaintext, err := KMS.DecryptKey(key.KeyID, key.Ciphertext, Context{})
	if err != nil {
		t.Fatalf("Failed to decrypt key: %v", err)
	}
	if !bytes.Equal(key.Plaintext, plaintext) {
		t.Fatalf("Decrypted key does not match generated one: got %x - want %x", key.Plaintext, plaintext)
	}
}

func TestDecryptKey(t *testing.T) {

###  Introduced KMS v2

                        if (id.equalsIgnoreCase(server.getId())) {
                            SettingsDecryptionResult result =
                                    settingsDecrypter.decrypt(new DefaultSettingsDecryptionRequest(server));
                            server = result.getServer();

                            AuthenticationInfo authInfo = new AuthenticationInfo();

            sessionBuilder.setVersionFilter(versionFilter);
        }

        DefaultSettingsDecryptionRequest decrypt = new DefaultSettingsDecryptionRequest();
        decrypt.setProxies(request.getProxies());
        decrypt.setServers(request.getServers());
        SettingsDecryptionResult decrypted = settingsDecrypter.decrypt(decrypt);

        if (logger.isDebugEnabled()) {
            for (SettingsProblem problem : decrypted.getProblems()) {

# probably when including SQLModel
sqlalchemy >=1.3.18,<1.4.43
databases[sqlite] >=0.3.2,<0.7.0
flask >=1.1.2,<3.0.0
anyio[trio] >=3.2.1,<4.0.0
python-jose[cryptography] >=3.3.0,<4.0.0
pyyaml >=5.3.1,<7.0.0
passlib[bcrypt] >=1.7.2,<2.0.0

# types
types-ujson ==5.7.0.1