feat(kms): bind encryption context into DEK envelopes as AAD (#6639)

This commit is contained in:
唐小鸭
2026-08-26 13:58:13 +08:00
committed by GitHub
parent 51041e917e
commit a4377b6351
9 changed files with 606 additions and 55 deletions
+4 -1
View File
@@ -17,4 +17,7 @@
pub mod ciphers;
pub mod dek;
pub use dek::{AesDekCrypto, DataKeyEnvelope, DekCrypto, context_aad, generate_key_material, is_data_key_envelope};
pub use dek::{
AesDekCrypto, CONTEXT_BINDING_AAD_V1, DataKeyEnvelope, DekCrypto, context_aad, desired_context_binding,
envelope_aad_write_enabled, envelope_wrap_aad, generate_key_material, is_data_key_envelope,
};