feat(property-encryption): introduce End-To-End Property Encryption

benchkit-backend/LICENSES.txt

@@ -11,6 +11,7 @@ Apache Software License, Version 2.0
   Neo4j Bolt Connection (Pooled Source impl)
   Neo4j Bolt Connection (Provider SPI)
   Neo4j Bolt Connection (Routed Source impl)
+  Neo4j Bolt Connection Codec
   Netty/Buffer
   Netty/Codec/Base
   Netty/Codec/Compression

benchkit-backend/NOTICE.txt

@@ -26,6 +26,7 @@ Apache Software License, Version 2.0
   Neo4j Bolt Connection (Pooled Source impl)
   Neo4j Bolt Connection (Provider SPI)
   Neo4j Bolt Connection (Routed Source impl)
+  Neo4j Bolt Connection Codec
   Netty/Buffer
   Netty/Codec/Base
   Netty/Codec/Compression

benchkit-backend/pom.xml

@@ -7,7 +7,7 @@
     <parent>
         <artifactId>neo4j-java-driver-parent</artifactId>
         <groupId>org.neo4j.driver</groupId>
-        <version>6.2-SNAPSHOT</version>
+        <version>6.3-SNAPSHOT</version>
     </parent>
 
     <artifactId>benchkit-backend</artifactId>

bom/pom.xml

@@ -6,7 +6,7 @@
   <parent>
     <groupId>org.neo4j.driver</groupId>
     <artifactId>neo4j-java-driver-parent</artifactId>
-    <version>6.2-SNAPSHOT</version>
+    <version>6.3-SNAPSHOT</version>
   </parent>
 
   <artifactId>neo4j-java-driver-bom</artifactId>
@@ -42,6 +42,31 @@
         <artifactId>neo4j-java-driver-observation-micrometer</artifactId>
         <version>${project.version}</version>
       </dependency>
+      <dependency>
+        <groupId>org.neo4j.driver</groupId>
+        <artifactId>neo4j-java-driver-encryption-google-cloud-kms</artifactId>
+        <version>${project.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.neo4j.driver</groupId>
+        <artifactId>neo4j-java-driver-encryption-aws-kms</artifactId>
+        <version>${project.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.neo4j.driver</groupId>
+        <artifactId>neo4j-java-driver-encryption-azure-keyvault</artifactId>
+        <version>${project.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.neo4j.driver</groupId>
+        <artifactId>neo4j-java-driver-encryption-local</artifactId>
+        <version>${project.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.neo4j.driver</groupId>
+        <artifactId>neo4j-java-driver-encryption-kyber</artifactId>
+        <version>${project.version}</version>
+      </dependency>
       <dependency>
         <groupId>org.neo4j.bolt</groupId>
         <artifactId>neo4j-bolt-connection-bom</artifactId>

bundle/LICENSES.txt

@@ -8,6 +8,7 @@ Apache Software License, Version 2.0
   Neo4j Bolt Connection (Pooled Source impl)
   Neo4j Bolt Connection (Provider SPI)
   Neo4j Bolt Connection (Routed Source impl)
+  Neo4j Bolt Connection Codec
   Netty/Buffer
   Netty/Codec/Base
   Netty/Common

bundle/NOTICE.txt

@@ -23,6 +23,7 @@ Apache Software License, Version 2.0
   Neo4j Bolt Connection (Pooled Source impl)
   Neo4j Bolt Connection (Provider SPI)
   Neo4j Bolt Connection (Routed Source impl)
+  Neo4j Bolt Connection Codec
   Netty/Buffer
   Netty/Codec/Base
   Netty/Common

bundle/pom.xml

@@ -6,7 +6,7 @@
   <parent>
     <groupId>org.neo4j.driver</groupId>
     <artifactId>neo4j-java-driver-parent</artifactId>
-    <version>6.2-SNAPSHOT</version>
+    <version>6.3-SNAPSHOT</version>
     <relativePath>..</relativePath>
   </parent>
 

driver-it/encryption-aws-kms-it/LICENSES.txt

@@ -0,0 +1,5 @@
+This file contains the full license text of the included third party
+libraries. For an overview of the licenses see the NOTICE.txt file.
+
+
+

driver-it/encryption-aws-kms-it/NOTICE.txt

@@ -0,0 +1,20 @@
+Copyright (c) "Neo4j"
+Neo4j Sweden AB [https://neo4j.com]
+
+This file is part of Neo4j.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+Full license texts are found in LICENSES.txt.
+
+
+Third-party licenses
+--------------------
+

driver-it/encryption-aws-kms-it/pom.xml

@@ -0,0 +1,92 @@
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
+                      http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>org.neo4j.driver</groupId>
+        <artifactId>neo4j-java-driver-it</artifactId>
+        <version>6.3-SNAPSHOT</version>
+    </parent>
+
+    <artifactId>neo4j-java-driver-encryption-aws-kms-it</artifactId>
+
+    <packaging>jar</packaging>
+    <name>Neo4j Java Driver (Encryption AWS KMS)</name>
+
+    <scm>
+        <connection>scm:git:git://github.com/neo4j/neo4j-java-driver.git</connection>
+        <developerConnection>scm:git:git@github.com:neo4j/neo4j-java-driver.git</developerConnection>
+        <url>https://github.com/neo4j/neo4j-java-driver</url>
+    </scm>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.neo4j.driver</groupId>
+            <artifactId>neo4j-java-driver</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.neo4j.driver</groupId>
+            <artifactId>neo4j-java-driver-encryption-aws-kms</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.neo4j.driver</groupId>
+            <artifactId>neo4j-java-driver-encryption-common-it</artifactId>
+            <version>${project.version}</version>
+            <type>test-jar</type>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.junit.jupiter</groupId>
+            <artifactId>junit-jupiter</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.testcontainers</groupId>
+            <artifactId>testcontainers-junit-jupiter</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.testcontainers</groupId>
+            <artifactId>testcontainers-neo4j</artifactId>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>org.neo4j.driver</groupId>
+                <artifactId>neo4j-java-driver-bom</artifactId>
+                <type>pom</type>
+                <scope>import</scope>
+                <version>${project.version}</version>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-failsafe-plugin</artifactId>
+            </plugin>
+        </plugins>
+        <pluginManagement>
+            <plugins>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-compiler-plugin</artifactId>
+                    <configuration>
+                        <compilerArgs>
+                            <arg>-proc:none</arg>
+                        </compilerArgs>
+                    </configuration>
+                </plugin>
+            </plugins>
+        </pluginManagement>
+    </build>
+
+</project>

driver-it/encryption-aws-kms-it/src/test/java/org/neo4j/driver/it/encryption/aws_kms/AsyncEnvelopeEncryptionIT.java

@@ -0,0 +1,31 @@
+/*
+ * Copyright (c) "Neo4j"
+ * Neo4j Sweden AB [https://neo4j.com]
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.neo4j.driver.it.encryption.aws_kms;
+
+import java.security.NoSuchAlgorithmException;
+import org.neo4j.driver.it.encryption.common.AbstractAsyncEnvelopeEncryptionIT;
+import org.neo4j.driver.property_encryption.KeyEncapsulationService;
+import org.neo4j.driver.property_encryption.aws_kms.AWSKeyEncapsulationService;
+import org.neo4j.driver.property_encryption.aws_kms.AwsKeyEncapsulationOptions;
+
+final class AsyncEnvelopeEncryptionIT extends AbstractAsyncEnvelopeEncryptionIT {
+
+    @Override
+    protected KeyEncapsulationService keyEncapsulationService() throws NoSuchAlgorithmException {
+        return new AWSKeyEncapsulationService(AwsKeyEncapsulationOptions.of("34bec748-e9b0-4be7-99c1-9731ff08b73b"));
+    }
+}

driver-it/encryption-aws-kms-it/src/test/java/org/neo4j/driver/it/encryption/aws_kms/EnvelopeEncryptionIT.java

@@ -0,0 +1,31 @@
+/*
+ * Copyright (c) "Neo4j"
+ * Neo4j Sweden AB [https://neo4j.com]
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.neo4j.driver.it.encryption.aws_kms;
+
+import java.security.NoSuchAlgorithmException;
+import org.neo4j.driver.it.encryption.common.AbstractEnvelopeEncryptionIT;
+import org.neo4j.driver.property_encryption.KeyEncapsulationService;
+import org.neo4j.driver.property_encryption.aws_kms.AWSKeyEncapsulationService;
+import org.neo4j.driver.property_encryption.aws_kms.AwsKeyEncapsulationOptions;
+
+class EnvelopeEncryptionIT extends AbstractEnvelopeEncryptionIT {
+
+    @Override
+    protected KeyEncapsulationService keyEncapsulationService() throws NoSuchAlgorithmException {
+        return new AWSKeyEncapsulationService(AwsKeyEncapsulationOptions.of("34bec748-e9b0-4be7-99c1-9731ff08b73b"));
+    }
+}

driver-it/encryption-aws-kms-it/src/test/java/org/neo4j/driver/it/encryption/aws_kms/ReactiveEnvelopeEncryptionIT.java

@@ -0,0 +1,31 @@
+/*
+ * Copyright (c) "Neo4j"
+ * Neo4j Sweden AB [https://neo4j.com]
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.neo4j.driver.it.encryption.aws_kms;
+
+import java.security.NoSuchAlgorithmException;
+import org.neo4j.driver.it.encryption.common.AbstractReactiveEnvelopeEncryptionIT;
+import org.neo4j.driver.property_encryption.KeyEncapsulationService;
+import org.neo4j.driver.property_encryption.aws_kms.AWSKeyEncapsulationService;
+import org.neo4j.driver.property_encryption.aws_kms.AwsKeyEncapsulationOptions;
+
+public final class ReactiveEnvelopeEncryptionIT extends AbstractReactiveEnvelopeEncryptionIT {
+
+    @Override
+    protected KeyEncapsulationService keyEncapsulationService() throws NoSuchAlgorithmException {
+        return new AWSKeyEncapsulationService(AwsKeyEncapsulationOptions.of("34bec748-e9b0-4be7-99c1-9731ff08b73b"));
+    }
+}

driver-it/encryption-aws-kms-it/src/test/java/org/neo4j/driver/it/encryption/aws_kms/ReactiveStreamsEnvelopeEncryptionIT.java

@@ -0,0 +1,31 @@
+/*
+ * Copyright (c) "Neo4j"
+ * Neo4j Sweden AB [https://neo4j.com]
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.neo4j.driver.it.encryption.aws_kms;
+
+import java.security.NoSuchAlgorithmException;
+import org.neo4j.driver.it.encryption.common.AbstractReactiveStreamsEnvelopeEncryptionIT;
+import org.neo4j.driver.property_encryption.KeyEncapsulationService;
+import org.neo4j.driver.property_encryption.aws_kms.AWSKeyEncapsulationService;
+import org.neo4j.driver.property_encryption.aws_kms.AwsKeyEncapsulationOptions;
+
+final class ReactiveStreamsEnvelopeEncryptionIT extends AbstractReactiveStreamsEnvelopeEncryptionIT {
+
+    @Override
+    protected KeyEncapsulationService keyEncapsulationService() throws NoSuchAlgorithmException {
+        return new AWSKeyEncapsulationService(AwsKeyEncapsulationOptions.of("34bec748-e9b0-4be7-99c1-9731ff08b73b"));
+    }
+}

driver-it/encryption-azure-keyvault-it/LICENSES.txt

@@ -0,0 +1,5 @@
+This file contains the full license text of the included third party
+libraries. For an overview of the licenses see the NOTICE.txt file.
+
+
+

driver-it/encryption-azure-keyvault-it/NOTICE.txt

@@ -0,0 +1,20 @@
+Copyright (c) "Neo4j"
+Neo4j Sweden AB [https://neo4j.com]
+
+This file is part of Neo4j.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+Full license texts are found in LICENSES.txt.
+
+
+Third-party licenses
+--------------------
+