minio

History

Andreas Auernhammer baec331e84 crypto: add functions for sealing/unsealing the etag for SSE (#6618 ) This commit adds two functions for sealing/unsealing the etag (a.k.a. content MD5) in case of SSE single-part upload. Sealing the ETag is neccessary in case of SSE-S3 to preserve the security guarantees. In case of SSE-S3 AWS returns the content-MD5 of the plaintext object as ETag. However, we must not store the MD5 of the plaintext for encrypted objects. Otherwise it becomes possible for an attacker to detect equal/non-equal encrypted objects. Therefore we encrypt the ETag before storing on the backend. But we only need to encrypt the ETag (content-MD5) if the client send it - otherwise the client cannot verify it anyway.		6 years ago
..
config.go	Add support for SSE-S3 server side encryption with vault (#6192 )	6 years ago
doc.go	fix object rebinding SSE-C security guarantee violation (#6121 )	6 years ago
error.go	return `Access Denied` for invalid SSE keys (#6432 )	6 years ago
header.go	Use GetObjectNInfo in CopyObject and CopyObjectPart (#6489 )	6 years ago
header_test.go	Use GetObjectNInfo in CopyObject and CopyObjectPart (#6489 )	6 years ago
key.go	crypto: add functions for sealing/unsealing the etag for SSE (#6618 )	6 years ago
key_test.go	crypto: add functions for sealing/unsealing the etag for SSE (#6618 )	6 years ago
kms.go	crypto: add support for parsing/creating SSE-C/SSE-S3 metadata (#6169 )	6 years ago
kms_test.go	crypto: add support for parsing/creating SSE-C/SSE-S3 metadata (#6169 )	6 years ago
metadata.go	crypto: add functions for sealing/unsealing the etag for SSE (#6618 )	6 years ago
metadata_test.go	crypto: add functions for sealing/unsealing the etag for SSE (#6618 )	6 years ago
sse.go	crypto: add helper functions for unsealing object keys (#6609 )	6 years ago
sse_test.go	crypto: add helper functions for unsealing object keys (#6609 )	6 years ago
vault.go	Add Vault support for custom CAs directory (#6527 )	6 years ago