-
Type: Sub-task
-
Resolution: Fixed
-
Priority: Unknown
-
Affects Version/s: None
-
Component/s: Client Side Encryption
The server scope for QEv2 states:
Change from CTR cipher mode to CBC cipher mode for encrypting the user data. In final cipher in use will be AES-256-CBC with AEAD provided by HMAC-SHA-256. This is not the same as the FLE 1 algorithm which took half of SHA-512 for AEAD.
This impacts kFLE2EqualityIndexedValueV2 and kFLE2RangeIndexedValueV2. Also, a new unindexed encrypted value type will be needed that uses CBC.
So with QEv2 the CTR crypto callbacks no longer get called and the tests stubbing them can be removed.
AC:
- Remove the aes256CtrDecryptHook and aes256CtrEncryptHook failing tests.