Message encryption in AMS

By using message encryption, a message sender can be sure that the content of the message has not been modified before reaching the recipient.

When an application places a message on a queue, Advanced Message Security (AMS) checks if the target queue has a AMS policy for signing or encryption. If encryption is required, AMS signs and encrypts the data.

In addition to the signing process, AMS encrypts the message data with a symmetric key, using the encryption algorithm specified in the AMS policy associated with the target queue. The message is then addressed to each potential recipient specified in that policy, using the users' public keys.

When an application retrieves the message from the queue, AMS verifies the signature and decrypts the message data using the private key of the recipient user.