hashicorp / hashicorp/vault

Why the transit `rewrap` endpoint does not accept `associated_data`?

Open
#31,791 2 comments 1 reaction 0 assignees View on GitHub
bug secret/transit
Dominant language
Go
Stars
36.3k
Forks
4.8k
PR merge metrics
PR metrics pending

Description

Why the `transit/rewrap` endpoint does not accept `associated_data`. In that case, when a data is encrypted with `associated data`, it is not possible to rewrap the cipher text?

Contributor guide

Open the contributing guide

Research direction

Start by locating the transit/rewrap endpoint and its handling of associated_data, then inspect related API documentation and tests. The issue does not specify an implementation or acceptance criteria, so confirm the intended behavior and cryptographic constraints before defining what completion means.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
api, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.