fix(sdk)!: remove NanoTDF implementation

.github/workflows/checks.yaml

@@ -160,54 +160,6 @@ jobs:
           fi
         working-directory: cmdline
 
-      - name: Encrypt/Decrypt NanoTDF
-        run: |
-          echo 'here is some data to encrypt' > data
-
-          java -jar target/cmdline.jar \
-            --client-id=opentdf-sdk \
-            --client-secret=secret \
-            --platform-endpoint=http://localhost:8080 \
-            -h\
-            encryptnano --kas-url=http://localhost:8080 --attr https://example.com/attr/attr1/value/value1 --policy-type encrypted -f data -m 'here is some metadata' > nano.ntdf
-
-          java -jar target/cmdline.jar \
-            --client-id=opentdf-sdk \
-            --client-secret=secret \
-            --platform-endpoint=http://localhost:8080 \
-            -h\
-            decryptnano -f nano.ntdf > decrypted
-
-          if ! diff -q data decrypted; then
-            printf 'decrypted data is incorrect [%s]' "$(< decrypted)"
-            exit 1
-          fi
-        working-directory: cmdline
-
-      - name: Encrypt/Decrypt NanoTDF with plain text policy type
-        run: |
-          echo 'here is some data to encrypt' > data
-
-          java -jar target/cmdline.jar \
-            --client-id=opentdf-sdk \
-            --client-secret=secret \
-            --platform-endpoint=http://localhost:8080 \
-            -h\
-            encryptnano --kas-url=http://localhost:8080 --attr https://example.com/attr/attr1/value/value1 --policy-type plaintext -f data -m 'here is some metadata' > nanopt.ntdf
-
-          java -jar target/cmdline.jar \
-            --client-id=opentdf-sdk \
-            --client-secret=secret \
-            --platform-endpoint=http://localhost:8080 \
-            -h\
-            decryptnano -f nanopt.ntdf > decrypted
-
-          if ! diff -q data decrypted; then
-            printf 'decrypted data is incorrect [%s]' "$(< decrypted)"
-            exit 1
-          fi
-        working-directory: cmdline
-
       - name: Encrypt/Decrypt Assertions
         run: |
           echo "basic assertions"

cmdline/src/main/java/io/opentdf/platform/Command.java

@@ -8,7 +8,6 @@
 import io.opentdf.platform.sdk.Config;
 import io.opentdf.platform.sdk.KeyType;
 import io.opentdf.platform.sdk.Config.AssertionVerificationKeys;
-import io.opentdf.platform.sdk.NanoTDFType;
 import io.opentdf.platform.sdk.SDK;
 import io.opentdf.platform.sdk.SDKBuilder;
 import nl.altindag.ssl.SSLFactory;
@@ -23,7 +22,6 @@
 import java.io.FileInputStream;
 import java.io.IOException;
 import java.io.PrintWriter;
-import java.nio.ByteBuffer;
 import java.nio.channels.FileChannel;
 import java.nio.charset.StandardCharsets;
 import java.nio.file.Files;
@@ -323,68 +321,4 @@ void readMetadata(@Option(names = { "-f", "--file" }, required = true) Path tdfP
             }
         }
     }
-
-    @CommandLine.Command(name = "encryptnano")
-    void createNanoTDF(
-            @Option(names = { "-f", "--file" }, defaultValue = Option.NULL_VALUE) Optional<File> file,
-            @Option(names = { "-k", "--kas-url" }, required = true) List<String> kas,
-            @Option(names = { "-m", "--metadata" }, defaultValue = Option.NULL_VALUE) Optional<String> metadata,
-            @Option(names = { "--policy-type" }, defaultValue = Option.NULL_VALUE, description = "how to embed the policy, either plaintext or encrypted") Optional<String> policyType,
-            @Option(names = { "-a", "--attr" }, defaultValue = Option.NULL_VALUE) Optional<String> attributes)
-            throws Exception {
-
-        var sdk = buildSDK();
-        var kasInfos = kas.stream().map(k -> {
-            var ki = new Config.KASInfo();
-            ki.URL = k;
-            return ki;
-        }).toArray(Config.KASInfo[]::new);
-
-        List<Consumer<Config.NanoTDFConfig>> configs = new ArrayList<>();
-        configs.add(Config.withNanoKasInformation(kasInfos));
-        attributes.ifPresent(attr -> {
-            configs.add(Config.witDataAttributes(attr.split(",")));
-        });
-        policyType.ifPresent(mode -> {
-            switch (mode) {
-                case "":
-                case "encrypted":
-                    configs.add(Config.withPolicyType(NanoTDFType.PolicyType.EMBEDDED_POLICY_ENCRYPTED));
-                    break;
-                case "plaintext":
-                    configs.add(Config.withPolicyType(NanoTDFType.PolicyType.EMBEDDED_POLICY_PLAIN_TEXT));
-                    break;
-                default:
-                    throw new IllegalArgumentException("Unknown policy type: " + mode);
-            }
-        });
-
-        var nanoTDFConfig = Config.newNanoTDFConfig(configs.toArray(Consumer[]::new));
-        try (var in = file.isEmpty() ? new BufferedInputStream(System.in) : new FileInputStream(file.get())) {
-            try (var out = new BufferedOutputStream(System.out)) {
-                sdk.createNanoTDF(ByteBuffer.wrap(in.readAllBytes()), out, nanoTDFConfig);
-            }
-        }
-    }
-
-    @CommandLine.Command(name = "decryptnano")
-    void readNanoTDF(@Option(names = { "-f", "--file" }, required = true) Path nanoTDFPath,
-            @Option(names = { "--kas-allowlist" }, defaultValue = Option.NULL_VALUE) Optional<String> kasAllowlistStr,
-            @Option(names = {
-                    "--ignore-kas-allowlist" }, defaultValue = Option.NULL_VALUE) Optional<Boolean> ignoreAllowlist)
-            throws Exception {
-        var sdk = buildSDK();
-        try (var in = FileChannel.open(nanoTDFPath, StandardOpenOption.READ)) {
-            try (var stdout = new BufferedOutputStream(System.out)) {
-                ByteBuffer buffer = ByteBuffer.allocate((int) in.size());
-                in.read(buffer);
-                buffer.flip();
-                var opts = new ArrayList<Consumer<Config.NanoTDFReaderConfig>>();
-                ignoreAllowlist.map(Config::WithNanoIgnoreKasAllowlist).ifPresent(opts::add);
-                kasAllowlistStr.map(s -> s.split(",")).map(Config::WithNanoKasAllowlist).ifPresent(opts::add);
-                var readerConfig = Config.newNanoTDFReaderConfig(opts.toArray(new Consumer[0]));
-                sdk.readNanoTDF(buffer, stdout, readerConfig);
-            }
-        }
-    }
 }

sdk/fuzz.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 set -e
 
-tests=("fuzzNanoTDF", "fuzzTDF", "fuzzZipRead")
+tests=("fuzzTDF", "fuzzZipRead")
 base_seed_dir="src/test/resources/io/opentdf/platform/sdk/FuzzingInputs/"
 
 for test in "${tests[@]}"; do