Decrypts the ciphertext CiphertextBlob. The ciphertext can be generated by the following API.

GenerateDataKey

Encrypt

• Request format

    CiphertextBlob=blob&EncryptionContext=json  //Blob is a Base64 encoded string.

• Request parameters

  • CiphertextBlob
    • Description: Ciphertext to be decrypted
    • Type: String
    • Required or not: Yes
      • EncryptionContext
    • Description: JSON string of a key/value pair. If this parameter is specified on the Encrypt or GenerateDataKey API, the same parameter is also required for decryption. For details, refer to EncryptionContext description.
    • Type: String
    • Required or not: No

• Request example

https://kms.cn-hangzhou.aliyuncs.com/?Action=Decrypt
&CiphertextBlob=<your ciphertextblob>
&EncryptionContext = <json string>
&<Other public parameters>

• Return format

{
    "Plaintext": blob, // Blob is a Base64 encoded string.
    "KeyId": "string",
    "RequestId":"string"
}

• Return parameters
  • KeyId
    • Description: Globally unique identifier of CMK
    • Type: String
  • Plaintext
    • Description: Plaintext of the key after decryption
    • Type: String
  • RequestId
    • Description: Random access ID
    • Type: String
• Return example:

//json response
{
"KeyId": "KeyId"
"Plaintext": "Plaintext"
"RequestId": "207596a2-36d3-4840-b1bd-f87044699bd7"
}
//xml response
<KMS>
    <KeyId>KeyId</KeyId>
    <Plaintext>Plaintext</Plaintext>
    <RequestId>4bd560a1-729e-45f1-a3d9-b2a33d61046b</RequestId>
</KMS>