Comments (2)
Although object updates are unlikely, they may happen, and we should improve this.
Let us use a random Nonce that is stored with an object. As you did, I would also suggest having the uid as part of the DEM authentication, since we want to prevent an attack where values are switched between 2 Uids
from kms.
PR #65 created against main for quick release; single commit to be cherry-picked on develop.
Note: this is a breaking change on the ciphertexts, but since we just introduced FindexRedis and it is meant to be run in (future) TEEs, I do not think it is an issue. It it is, it will be easy to introduce a fallback on the previous decryption mechanism if the old one fails
from kms.
Related Issues (20)
- Support for the creation of NIST key pairs in operation `CreateKeyPair` HOT 1
- Removal of openssl in the CLI HOT 2
- FIPS version of the Server HOT 3
- Support for `SetAttributes` KMIP operation
- Support for X509 v3 extensions on `Certify`
- Support for GMail S/MIME requirements
- Support for the creation of self-signed certificates HOT 1
- FIPS uncompliance error macro for clearer code HOT 1
- Make RSA_OAEP_AES a generalized Encryption System for use in all KMS and not only for key wrapping. HOT 1
- Check for potential FIPS 140-3 compliant ECIES implementation using OpenSSL.
- Support keypair generation for Curve448 Montgomerry and Edwards forms.
- Support RSA_OAEP for different hashes. HOT 1
- Critical: better salt for password derivation HOT 2
- Change BigUint utilization for BigNum from OpenSSL HOT 2
- Fix Panic if AuthenticatedEncryptionTag is missing
- Zeroize crypto
- Add `Derive Key` KMIP operation for password derivation
- OpenSSL ECIES for X and Ed curves HOT 1
- Load OpenSSL FIPS module
- Accurate CryptographicAlgorithm for KMIP key creation on elliptic curves
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kms.