Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow for non-sequential frame IV values in decryption #229

Open
robin-aws opened this issue Sep 15, 2020 · 0 comments
Open

Allow for non-sequential frame IV values in decryption #229

robin-aws opened this issue Sep 15, 2020 · 0 comments

Comments

@robin-aws
Copy link
Contributor

In https://github.com/awslabs/aws-encryption-sdk-specification/blob/master/client-apis/decrypt.md#decrypt-the-message-body:

"The IV is the sequence number used in the message body AAD above, padded to the IV length with 0."

This is actually too restrictive, because the message format includes an IV field in each frame which should be the source of this value. It happens that most ESDK implementations now use sequential IV values when encrypting (https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/IV-reference.html), but ESDKs still need to be able to parse older messages or ones created by other implementations.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant