Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

prevent IV collisions for awskms #128

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

takeyourhatoff
Copy link

This PR partially fixes #127. It prevents the possibility of an IV collision when using the awskms provider. The aesgcm provider remains vulnerable.

This change switches from a random IV to a counter-based IV in a backward-compatible way for the awskms provider in order to mitigate the risk of an IV collision.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

IV collision risk
1 participant