minio

mirror of https://github.com/minio/minio.git synced 2025-01-23 12:43:16 -05:00

History

Andreas Auernhammer baec331e84 crypto: add functions for sealing/unsealing the etag for SSE (#6618 )

This commit adds two functions for sealing/unsealing the
etag (a.k.a. content MD5) in case of SSE single-part upload.

Sealing the ETag is neccessary in case of SSE-S3 to preserve
the security guarantees. In case of SSE-S3 AWS returns the
content-MD5 of the plaintext object as ETag. However, we
must not store the MD5 of the plaintext for encrypted objects.
Otherwise it becomes possible for an attacker to detect
equal/non-equal encrypted objects. Therefore we encrypt
the ETag before storing on the backend. But we only need
to encrypt the ETag (content-MD5) if the client send it -
otherwise the client cannot verify it anyway.

2018-10-16 10:02:19 -07:00

config.go

Add support for SSE-S3 server side encryption with vault (#6192 )

2018-08-17 12:52:14 -07:00

doc.go

fix object rebinding SSE-C security guarantee violation (#6121 )

2018-07-09 17:18:28 -07:00

error.go

return Access Denied for invalid SSE keys (#6432 )

2018-09-06 12:31:12 -07:00

header_test.go

Use GetObjectNInfo in CopyObject and CopyObjectPart (#6489 )