awslabs / aws-encryption-sdk-specification

AWS Encryption SDK Specification
Other
29 stars 27 forks source link

Implementation: Encrypt input maxPlaintextSize is NOT passed to CMM is plaintext length is known #180

Open lavaleri opened 4 years ago

lavaleri commented 4 years ago

Change: https://github.com/awslabs/aws-encryption-sdk-specification/blob/master/changes/2020-06-17_encrypt-max-plaintext-length-input/change.md The GetEncryptionMaterials call during Encrypt MUST use the actual plaintext length (if it can be determined) for max plaintext bound even if a maxPlaintextSize is supplied on input.