Regarding Encryption and Decryption of Payload Messages

[mschunekar]

We are running pubsub project using AWSIotSDK in Python. We are facing issue while encrypting and decrypting payload message. Do we have method for encrypting and decrypting payload messages in AWSIoTMQTTClient. As per my knowledge AWSIoTHub is our mqtt broker. Can you guide me on same.
I want to implement same as given in below link. Broker should encrypt or decrypt data. Because if I used Python library, How Can I store keys for decrypt message for RDA Client.
Refer : https://www.hivemq.com/blog/mqtt-security-fundamentals-payload-encryption/

[bretambrose]

The IoT SDKs do not contain any support for encrypting/decrypting payloads at the moment. AWS IoT Core does not support any broker-side payload encryption/decryption either.

TLS is required to connect to IoT Core so at a minimum you have in-flight encryption automatically. Payload encryption seems most appropriate in situations where you can't use TLS (not the case here with AWS IoT Core) or you don't trust the broker.

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.