awslabs / awslabs/aws-encryption-sdk-specification
Raw AES Keyring doc security considerations
- Dominant language
- JavaScript
- Stars
- 37
- Forks
- 27
- PR merge metrics
- No merged PRs in 30d
Description
Related to #187
- IV exhaustion/how many keys can we wrap this way?
- wrapping key use; both how many times it is used to encrypt data keys and where/whether/how it is used elsewhere.
- Does not write any information about what wrapping algorithm suite was used to wrap the data key.
- Puts data that doesn't belong in the provider info, into the provider info
Contributor guide
Research direction
Start by reading related issue #187 and reviewing the four listed concerns about IV exhaustion, wrapping-key reuse, missing algorithm-suite information, and provider info. Done means documenting the security considerations and clarifying what data belongs in provider info.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100