Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(core): NanoTDF KID size enforcement #1520

Closed
wants to merge 4 commits into from

Conversation

pflynn-virtru
Copy link
Member

@pflynn-virtru pflynn-virtru commented Sep 5, 2024

Introduced ECPublicKeyFetcher interface and its implementations to handle EC public key fetching. Updated SDK and nanotdf test cases to utilize the new interface, ensuring better abstraction and testability. Added validation for KID length and tag size in encryption methods.

Relates to #1506
resolves #1523

Introduced ECPublicKeyFetcher interface and its implementations to handle EC public key fetching. Updated SDK and nanotdf test cases to utilize the new interface, ensuring better abstraction and testability. Added validation for KID length and tag size in encryption methods.
@pflynn-virtru pflynn-virtru changed the title NanoTDF KID size enforcement fix(core): NanoTDF KID size enforcement Sep 5, 2024
Renamed `RealECPublicKeyFetcher` to `EcPublicKeyFetcher` for consistency. Introduced a constant for the maximum KID length and added a check for KID length in the `createNanoTDF` function.
@pflynn-virtru pflynn-virtru marked this pull request as ready for review September 5, 2024 18:34
@pflynn-virtru pflynn-virtru requested review from a team as code owners September 5, 2024 18:34

This comment has been minimized.

jentfoo
jentfoo previously approved these changes Sep 5, 2024
lib/ocrypto/aes_gcm.go Outdated Show resolved Hide resolved
Copy link
Contributor

github-actions bot commented Sep 5, 2024

Warning

This pull request does not reference any issues. Please add a reference to an issue in the body of the pull request description.

@pflynn-virtru pflynn-virtru requested a review from a team as a code owner September 5, 2024 20:22
Adjusted the error message in nanotdf_test.go to specify valid tag sizes from 12 to 16 instead of 12 or 16, ensuring consistency with encryption standards.
Copy link
Member

@strantalis strantalis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@pflynn-virtru I think there are unexpected changes in this pr?

auto-merge was automatically disabled October 30, 2024 19:35

Pull request was closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

NanoTDF KID size enforcement
3 participants