File tree 2 files changed +0
-20
lines changed
DynamoDbEncryption/dafny/DynamoDbEncryptionTransforms/src
2 files changed +0
-20
lines changed Original file line number Diff line number Diff line change @@ -92,16 +92,6 @@ module QueryTransform {
92
92
var decryptRes := tableConfig. itemEncryptor. DecryptItem (decryptInput);
93
93
var decrypted :- MapError (decryptRes);
94
94
95
- // If the decrypted result was plaintext, i.e. has no parsedHeader
96
- // then this is expected IFF the table config allows plaintext read
97
- assert decrypted. parsedHeader. None? ==>
98
- && EncOps. IsPlaintextItem (encryptedItems[x])
99
- && ! tableConfig. plaintextOverride. FORBID_PLAINTEXT_WRITE_FORBID_PLAINTEXT_READ?
100
- && (
101
- || tableConfig. plaintextOverride. FORBID_PLAINTEXT_WRITE_ALLOW_PLAINTEXT_READ?
102
- || tableConfig. plaintextOverride. FORCE_PLAINTEXT_WRITE_ALLOW_PLAINTEXT_READ?
103
- );
104
-
105
95
if keyId. KeyId? && decrypted. parsedHeader. Some? {
106
96
:- Need (|decrypted.parsedHeader.value.encryptedDataKeys| == 1, E("Query result has more than one Encrypted Data Key"));
107
97
if decrypted. parsedHeader. value. encryptedDataKeys[0]. keyProviderInfo == keyIdUtf8 {
Original file line number Diff line number Diff line change @@ -90,16 +90,6 @@ module ScanTransform {
90
90
var decryptRes := tableConfig. itemEncryptor. DecryptItem (decryptInput);
91
91
var decrypted :- MapError (decryptRes);
92
92
93
- // If the decrypted result was plaintext, i.e. has no parsedHeader
94
- // then this is expected IFF the table config allows plaintext read
95
- assert decrypted. parsedHeader. None? ==>
96
- && EncOps. IsPlaintextItem (encryptedItems[x])
97
- && ! tableConfig. plaintextOverride. FORBID_PLAINTEXT_WRITE_FORBID_PLAINTEXT_READ?
98
- && (
99
- || tableConfig. plaintextOverride. FORBID_PLAINTEXT_WRITE_ALLOW_PLAINTEXT_READ?
100
- || tableConfig. plaintextOverride. FORCE_PLAINTEXT_WRITE_ALLOW_PLAINTEXT_READ?
101
- );
102
-
103
93
if keyId. KeyId? && decrypted. parsedHeader. Some? {
104
94
:- Need (|decrypted.parsedHeader.value.encryptedDataKeys| == 1, E("Scan result has more than one Encrypted Data Key"));
105
95
if decrypted. parsedHeader. value. encryptedDataKeys[0]. keyProviderInfo == keyIdUtf8 {
You can’t perform that action at this time.
0 commit comments