> For the complete documentation index, see [llms.txt](https://sahamati.gitbook.io/aa-redirection-guidelines/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sahamati.gitbook.io/aa-redirection-guidelines/specification/encryption.md).

# Encryption

Note about the encryption of data passed as URL parameters

## Notes

1. Data-in-transit security by encrypting the communication channel: This is a must-have anyway and TLS 1.2 and above will be used (https), for communication between the FIU app and the AA web app.
2. Additional Data-in-transit security through encryption of data:

All encryption must be done using AES 256. For the AES 256 encryption below will be used:

**IV** – This can be 0\
**SALT** – This will be the reqdate or resdate\
**FI** – This will be the unique FIU ID ( i.e. the FIU entity id )\
**SECRETKEY** – This will be the secret passphrase shared by the AA with the FIU.

## References

* <https://mkyong.com/java/java-aes-encryption-and-decryption/>