Skip to content

@cipherstash/protect-dynamodb funcs to support more configurable naming conventions #148

@calvinbrewer

Description

@calvinbrewer

The encryption/decryption funcs here currently expect the HMAC attr (for search) to be suffixed with __hmac and for the source ciphertext (for decryption) to be suffixed with __source.

We might want to allow users to provide names for these. For example, someone might want to name the attr sk if it's used in a search key.

Similarly, we might want to add more flexibility around the key structure. Right now the value of the HMAC field is just the HMAC, but we might want to allow users to prefix their keys (e.g. add EMAIL# in front of the HMAC).

Originally posted by @CDThomas in #134 (comment)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions