awslabs / awslabs/aws-encryption-sdk-specification
Implementation: Encrypt input maxPlaintextSize is NOT passed to CMM is plaintext length is known
- Dominant language
- JavaScript
- Stars
- 37
- Forks
- 27
- PR merge metrics
- No merged PRs in 30d
Description
Change: https://github.com/awslabs/aws-encryption-sdk-specification/blob/master/changes/2020-06-17_encrypt-max-plaintext-length-input/change.md
The GetEncryptionMaterials call during Encrypt MUST use the actual plaintext length (if it can be determined) for `max plaintext bound` even if a maxPlaintextSize is supplied on input.
- [ ] Python https://github.com/aws/aws-encryption-sdk-python/issues/282
Contributor guide
Research direction
Start by reading the linked change document to understand the required max plaintext bound behavior, then inspect the Python implementation issue at aws/aws-encryption-sdk-python#282. Done means the Encrypt GetEncryptionMaterials call uses the actual plaintext length when it is known, even when maxPlaintextSize is supplied.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- cryptography
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100