alibaba / alibaba/acm-sdk-python

解密kms 128加密的配置报错,解密KMS加密的配置正常

Open
#12 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
59
Forks
26
PR merge metrics
No merged PRs in 30d

Description

看了Java acm sdk 的代码发现使用kms server解密的是encryptedDataKey ,不是配置的密文。
python那边在解密kms 128的配置的时候应该没有对encryptedDataKey进行解密。
见下面Java代码
![image](https://user-images.githubusercontent.com/26211950/106412672-3d7c9400-6483-11eb-9533-07c5738eee5f.png)

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by comparing the Python SDK's KMS 128 configuration-decryption path with the Java ACM SDK code referenced in the issue, focusing on encryptedDataKey versus the configuration ciphertext. Reproduce the reported KMS 128 error and verify completion when that configuration decrypts successfully without regressing normal KMS-encrypted configuration handling.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.