vault/sdk/helper/keysutil
Scott Miller 7d4d8cb708
Reject supplied nonces for non-convergent encryption operations (#22852)
* Ignore nonces when encrypting without convergence or with convergence versions > 1

* Honor nonce use warning in non-FIPS modes

* Revert "Honor nonce use warning in non-FIPS modes"

This reverts commit 2aee3dbdc1.

* Add a test func that removes a nonce when not needed

* err out rather than ignore the nonce

* Alter unit test to cover, also cover convergent version 3

* More unit test work

* Fix test 14

* changelog

* tests not already in a nonce present path

* Update unit test to not assume warning when nonce provided incorrectly

* remove unused test field

* Fix auto-squash events experiments

When #22835 was merged, it was auto-squashed, so the `experiments`
import was removed, but the test still referenced it.

This removes the (now unnecessary) experiment from the test.

* Allow nonces for managed keys, because we have no way of knowing if the backing cipher/mode needs one

---------

Co-authored-by: Christopher Swenson <christopher.swenson@hashicorp.com>
2023-09-08 08:07:33 -05:00
..
cache.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
consts.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
encrypted_key_storage_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
encrypted_key_storage.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
lock_manager.go Provide public key encryption via transit engine (#17934) 2023-05-11 11:56:46 +00:00
managed_key_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
policy_test.go Provide public key encryption via transit engine (#17934) 2023-05-11 11:56:46 +00:00
policy.go Reject supplied nonces for non-convergent encryption operations (#22852) 2023-09-08 08:07:33 -05:00
transit_lru.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
transit_syncmap.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00