awslabs / awslabs/aws-encryption-sdk-specification

Mismatched document about AWS Encryption SDK message format

Open
#227 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
37
Forks
27
PR merge metrics
No merged PRs in 30d

Description

Hi, I'm testing encryption and decryption on AWS KMS using SDK libraries(Node.js and Python).

Encryption responses of all libraries are not mismatched with response structure described in document(https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/message-format.html#body-framed-final-tag).

For example, `Reserved` property should be 4 zero sequence bytes, but it seems not be appeared in response structure. and also, the `Type` property should be 128(0x80) which is positioned immediately after `Version` property, but it is not matched too.

My purpose is to extracting some information like an initialization vector, however I'm stuck due to the mismatched documentation.

Let me know if document was deprecated or something what I'm missing.

Thank you.

Contributor guide

Open the contributing guide

Research direction

Start with the linked Message Format documentation, then compare its Reserved and Type fields against the Node.js and Python AWS KMS encryption responses described in the report. Done means the documentation or specification and the observed response structure are reconciled, with the expected format clarified.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, node.js, python
Domain
documentation, security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.