Azure 存储 blob 客户端加密不会解密 Java

Question

Azure 存储 blob，使用客户端加密上传 blob，使用 CEK 和 KEK。现在尝试在客户端使用 KEK 下载解密的文件。但文件已下载但未解密。仅显示加密文件。public class KeyVaultGettingStarted {    public static void main(String[] args) throws StorageException,            NoSuchAlgorithmException, InterruptedException, ExecutionException,            URISyntaxException, InvalidKeyException, IOException {        Utility.printSampleStartInfo("KeyVaultGettingStarted");        // Get the key ID from Utility if it exists.        String keyID = Utility.keyVaultKeyID;        // If no key ID was specified, we will create a new secret in Key Vault.        // To create a new secret, this client needs full permission to Key        // Vault secrets.        // Once the secret is created, its ID can be added to App.config. Once        // this is done,        // this client only needs read access to secrets.        if (keyID == null || keyID.isEmpty()) {            keyID = KeyVaultUtility.createSecret("KVGettingStartedSecret");        }        // Retrieve storage account information from connection string        // How to create a storage connection string -        // https://azure.microsoft.com/en-us/documentation/articles/storage-configure-connection-string/        CloudStorageAccount storageAccount = CloudStorageAccount                .parse(Utility.storageConnectionString);        CloudBlobClient client = storageAccount.createCloudBlobClient();        CloudBlobContainer container = client                .getContainerReference("blobencryptioncontainer"                        + UUID.randomUUID().toString().replace("-", ""));        container.createIfNotExists();        // Construct a resolver capable of looking up keys and secrets stored in        // Key Vault.        KeyVaultKeyResolver cloudResolver = new KeyVaultKeyResolver(                KeyVaultUtility.GetKeyVaultClient());}Azure 存储 blob，使用客户端加密上传 blob，使用 CEK 和 KEK。现在尝试在客户端使用 KEK 下载解密的文件。但文件已下载但未解密。仅显示加密文件。

Answer 1

请将下载方式改为：

blob.downloadToFile("C:\\Users\\kashyap\\Downloads\\abc.txt", null, uploadOptions, null);

您可以看到我上传到 azure blob 的图片已损坏：

但是当我用这个方法下载时，它又变回图片了：