aws / aws/amazon-s3-encryption-client-python

Additionally remove the KMSv1 Reserved EC Key in KmsKeyring

Abierto
#146 0 comentarios 0 reacciones 0 asignados Ver en GitHub
Lenguaje dominante
Python
Estrellas
2
Forks
4
Métricas de merge de PR
Sin PR fusionados en 30 d

Descripción

In Java:

```
private static final String KEY_ID_CONTEXT_KEY = "kms_cmk_id";
```

```
//= specification/s3-encryption/materials/s3-kms-keyring.md#kms-context
//# The stored encryption context with the two reserved keys removed MUST match the provided encryption context.
materialsEncryptionContextCopy.remove(KEY_ID_CONTEXT_KEY);
materialsEncryptionContextCopy.remove(ENCRYPTION_CONTEXT_ALGORITHM_KEY);
```

https://github.com/aws/amazon-s3-encryption-client-python/pull/143 points out we don't currently do this in Python.

Guía de contribución

Abrir la guía de contribución

Línea de trabajo

Start by locating the Python KMS keyring code that compares the stored encryption context with the provided context, then compare its behavior with the Java snippets and the referenced KMS context specification. Done means both reserved keys are excluded before comparison and the relevant tests cover the KMSv1 case.

Escrito por el modelo de indexación a partir del texto del issue.

Evaluación

Stack tecnológico
aws, python
Área
cloud, security
Tipo de issue
Error
Dificultad
3/5
Tiempo estimado
1-2 días
Estado de actividad
Estancado
Claridad
Bastante claro
Aptitud para principiantes
45/100

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.