awslabs / aws-encryption-sdk-specification

AWS Encryption SDK Specification
Other
30 stars 27 forks source link

Multi-keyrings MUST call OnDecrypt on list of child keyrings in order #153

Open robin-aws opened 4 years ago

robin-aws commented 4 years ago

The specification currently only states that if a generator is specified, it MUST be used first.

It also technically doesn't specify that the calls should be sequential, which it should to the same degree that OnEncrypt does (see also #146 for thoughts on a potential future parallel version).