shouldPass  bool
	}{
		// MinIO supported XML
		{
			inputXML: `<ServerSideEncryptionConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
			<Rule>
			<ApplyServerSideEncryptionByDefault>
			<SSEAlgorithm>AES256</SSEAlgorithm>
			</ApplyServerSideEncryptionByDefault>
			</Rule>
			</ServerSideEncryptionConfiguration>`,
			expectedErr: nil,
			shouldPass:  true,
		},
		// Unsupported XML
		{

        // Test AES128
        byte[] mac2 = PacMac.calculateMac(PacSignature.HMAC_SHA1_96_AES128, keys, TEST_DATA);
        assertNotNull(mac2);
        assertEquals(12, mac2.length);

        // Test AES256
        byte[] mac3 = PacMac.calculateMac(PacSignature.HMAC_SHA1_96_AES256, keys, TEST_DATA);
        assertNotNull(mac3);
        assertEquals(12, mac3.length);
    }

    /**

```

```
mc stat myminio/bucket/test.file
Name      : test.file
...
Encrypted :
  X-Amz-Server-Side-Encryption: AES256
```

## Encrypted Private Key

MinIO supports encrypted KES client private keys. Therefore, you can use
an password-protected private keys for `MINIO_KMS_KES_KEY_FILE`.

	AmzServerSideEncryptionCopyCustomerKeyMD5    = "X-Amz-Copy-Source-Server-Side-Encryption-Customer-Key-Md5"

	AmzEncryptionAES = "AES256"
	AmzEncryptionKMS = "aws:kms"

	// Signature v2 related constants
	AmzSignatureV2 = "Signature"
	AmzAccessKeyID = "AWSAccessKeyId"

	// Response request id.
	AmzRequestID     = "x-amz-request-id"

	if len(b) == 0 {
		return b, kms.AES256
	}

	if b[0] == '{' && b[len(b)-1] == '}' { // JSON object
		var c ciphertext
		if err := c.UnmarshalJSON(b); err != nil {
			// It may happen that a random ciphertext starts with '{' and ends with '}'.
			// In such a case, parsing will fail but we must not return an error. Instead
			// we return the ciphertext as it is.
			return b, kms.AES256
		}

		b = b[:0]

)

const (
	// SSECustomerKeySize is the size of valid client provided encryption keys in bytes.
	// Currently AWS supports only AES256. So the SSE-C key size is fixed to 32 bytes.
	SSECustomerKeySize = 32

	// SSEIVSize is the size of the IV data
	SSEIVSize = 32 // 32 bytes

	// SSEDAREPackageBlockSize - SSE dare package block size.

found in the LICENSE file. //go:build !purego package aes import ( "crypto/internal/fips140deps/cpu" "crypto/internal/impl" ) type code int // Function codes for the cipher message family of instructions. const ( aes128 code = 18 aes192 code = 19 aes256 code = 20 ) type block struct { function code // code for cipher message instruction key []byte // key (128, 192 or 256 bits) storage [32]byte // array backing key slice fallback *blockExpanded } // cryptBlocks invokes the cipher message (KM) instruction...

found in the LICENSE file. //go:build !purego package aes import ( "crypto/internal/fips140deps/cpu" "crypto/internal/impl" ) type code int // Function codes for the cipher message family of instructions. const ( aes128 code = 18 aes192 code = 19 aes256 code = 20 ) type block struct { function code // code for cipher message instruction key []byte // key (128, 192 or 256 bits) storage [32]byte // array backing key slice fallback *blockExpanded } // cryptBlocks invokes the cipher message (KM) instruction...