feat(kms): bind encryption context into DEK envelopes as AAD (#6639)

2026-08-31 09:18:28 +00:00 · 2026-08-26 13:58:13 +08:00
parent 51041e917e
commit a4377b6351
9 changed files with 606 additions and 55 deletions
@@ -100,7 +100,7 @@ anyhow = { workspace = true }
 metrics-util = { workspace = true, features = ["debugging"] }
 insta = { workspace = true, features = ["yaml", "json"] }
 tempfile = { workspace = true }
-temp-env = { workspace = true }
+temp-env = { workspace = true, features = ["async_closure"] }
 rcgen = { workspace = true }
 # "net" backs the scripted loopback Vault used by the policy wiring tests.
 tokio = { workspace = true, features = ["net", "test-util"] }