Sign & Encrypt API

This reference page documents the Managed API version of the sign-and-encrypt operation. It accepts request-time credentials and runs the hosted flow on your behalf.

Purpose

Use this endpoint when you are on the Managed API integration path and need Crittora to handle authentication and perform the signing and encryption sequence in one request.

Request Body

{
  "data": "plain_text_to_sign_and_encrypt"
}

Response

A successful response will include the encrypted output along with its digital signature and associated metadata.

Example Response:

{
  "statusCode": 200,
  "body": {
    "encrypted_data": "ugHTJ-ziCZ-QmWh8ruNJ0ojgwY8iA7OmPVGZDzVlGmImv4A4xWJ6HLchv_dRFZEdl7CB8i_F8KlEgTumCAY86B4n5jltbB8NnSiIvlyZT8WkyIDVCJX6F7VT6R_Wt99PjTg7Q"
  }
}

Status Codes

HTTP status codes returned by the sign-encrypt endpoint.

Code Examples

cURL Example:

curl -X POST https://managed.crittoraapis.com/v1/sign-encrypt \
  -H "Content-Type: application/json" \
  -H "username: your_cognito_username" \
  -H "password: your_cognito_password" \
  -H "api_key: your_crittora_api_key" \
  -H "access_key: your_crittora_access_key" \
  -H "secret_key: your_crittora_secret_key" \
  -d '{
    "data": "sensitive information to sign and encrypt"
  }'

JavaScript Example:

const signAndEncrypt = async (data) => {
  const response = await fetch("https://managed.crittoraapis.com/v1/sign-encrypt", {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "username": "your_cognito_username",
      "password": "your_cognito_password",
      "api_key": "your_crittora_api_key",
      "access_key": "your_crittora_access_key",
      "secret_key": "your_crittora_secret_key"
    },
    body: JSON.stringify({ data })
  });

  return await response.json();
};

Python Example:

import requests

def sign_and_encrypt(data):
    url = "https://managed.crittoraapis.com/v1/sign-encrypt"
    headers = {
        "Content-Type": "application/json",
        "username": "your_cognito_username",
        "password": "your_cognito_password",
        "api_key": "your_crittora_api_key",
        "access_key": "your_crittora_access_key",
        "secret_key": "your_crittora_secret_key"
    }

    payload = {"data": data}
    response = requests.post(url, headers=headers, json=payload)
    return response.json()

Operational Flow

1. The managed layer authenticates with Cognito using the supplied credentials.
2. The managed layer sends the sign-and-encrypt request to Crittora with:
   • Cognito bearer token
   • Crittora partner credentials
   • Raw data and requested actions ["s", "e"]
3. Crittora returns the encrypted payload and digital signature.
4. The combined result is returned to the caller.