nextcloud/lib
Stephen Cuppett cdaeed02b6 feat(objectstore): Add AWS SSE-KMS encryption support for S3 storage
Add support for Server-Side Encryption with AWS Key Management Service
(SSE-KMS) for S3 object storage. This allows Nextcloud to encrypt data
at rest in S3 using AWS-managed keys.

Key features:
- New config options: sse_kms_enabled and sse_kms_key_id
- Backward compatible with existing SSE-C (customer-provided keys)
- SSE-C takes precedence when both SSE-C and SSE-KMS are configured

Implementation details:
- Added getServerSideEncryptionParameters() method to centralize
  encryption parameter logic for both SSE-C and SSE-KMS
- Updated multipart uploads to use unified encryption parameters
- Added comprehensive PHPUnit tests for SSE-KMS scenarios
- Tested with AWS bucket and KMS keys in us-east-1 region

Co-Authored-By: Claude Sonnet 4.5 (1M context) <noreply@anthropic.com>
Signed-off-by: Stephen Cuppett <steve@cuppett.com>
2026-04-16 13:21:53 -04:00
..
composer Merge pull request #59360 from nextcloud/fix/sql-tz 2026-04-15 17:46:14 +02:00
l10n fix(l10n): Update translations from Transifex 2026-04-14 00:19:18 +00:00
private feat(objectstore): Add AWS SSE-KMS encryption support for S3 storage 2026-04-16 13:21:53 -04:00
public Merge pull request #59518 from nextcloud/fix/script-order 2026-04-15 08:53:29 +02:00
unstable feat(signed-request): moving out of unstable 2026-01-09 20:16:24 -01:00
base.php refactor: remove long deprecated IServerContainer methods 2026-03-10 10:36:35 +01:00
versioncheck.php ci(PHP): Test against 8.5 on CI 2025-12-19 15:34:34 +01:00