awslabs / awslabs/aws-encryption-sdk-specification

Raw AES Keyring doc security considerations

Open
#206 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
37
Forks
27
PR merge metrics
No merged PRs in 30d

Description

Related to #187

- IV exhaustion/how many keys can we wrap this way?
- wrapping key use; both how many times it is used to encrypt data keys and where/whether/how it is used elsewhere.
- Does not write any information about what wrapping algorithm suite was used to wrap the data key.
- Puts data that doesn't belong in the provider info, into the provider info

Contributor guide

Open the contributing guide

Research direction

Start by reading related issue #187 and reviewing the four listed concerns about IV exhaustion, wrapping-key reuse, missing algorithm-suite information, and provider info. Done means documenting the security considerations and clarifying what data belongs in provider info.

Written by the indexing model from the issue text.

Assessment

Domain
documentation, security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.