How to encrypt client-side with AWS KMS using the C# SDK

Question

Is there already a C# library for encrypting and decrypting data using Amazon's Key Management Service (KMS) but without sending your sensitive data to Amazon (ie using "envelope encryption" as described in their developer guide )? Something that handles the nitty gritty details of choosing algorithm, mode, IV, etc.?

To be clear, I'm not asking how to do it... just trying to find out if I've wasted my time rolling my own.

Answer 1

Closing this after a couple of years. In case anyone arrives here looking for a solution, the one I wrote is open-source, called AwsContrib.EnvelopeCrypto . I do not know if it is still in use anywhere.