Set KeyId parameter in AWS KMS Decrypt requests.

PiperOrigin-RevId: 534004793 Change-Id: I27f78366cb9cbff2ffe73ff35925243b6efec495
tink-crypto · May 22, 2023 · 7cc0ec2 · 7cc0ec2
1 parent 29a019c
commit 7cc0ec2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/java/com/google/crypto/tink/integration/awskms/AwsKmsAead.java b/src/main/java/com/google/crypto/tink/integration/awskms/AwsKmsAead.java
@@ -67,7 +67,7 @@ public byte[] decrypt(final byte[] ciphertext, final byte[] associatedData)
       throws GeneralSecurityException {
     try {
       DecryptRequest req =
-          new DecryptRequest()// place-holder, see b/170353401. DO NOT EDIT.
+          new DecryptRequest().withKeyId(keyArn)
               .withCiphertextBlob(ByteBuffer.wrap(ciphertext));
       if (associatedData != null && associatedData.length != 0) {
         req = req.addEncryptionContextEntry("associatedData", BinaryUtils.toHex(associatedData));