minio/cmd/crypto
Andreas Auernhammer baec331e84 crypto: add functions for sealing/unsealing the etag for SSE (#6618)
This commit adds two functions for sealing/unsealing the
etag (a.k.a. content MD5) in case of SSE single-part upload.

Sealing the ETag is neccessary in case of SSE-S3 to preserve
the security guarantees. In case of SSE-S3 AWS returns the
content-MD5 of the plaintext object as ETag. However, we
must not store the MD5 of the plaintext for encrypted objects.
Otherwise it becomes possible for an attacker to detect
equal/non-equal encrypted objects. Therefore we encrypt
the ETag before storing on the backend. But we only need
to encrypt the ETag (content-MD5) if the client send it -
otherwise the client cannot verify it anyway.
2018-10-16 10:02:19 -07:00
..
config.go Add support for SSE-S3 server side encryption with vault (#6192) 2018-08-17 12:52:14 -07:00
doc.go fix object rebinding SSE-C security guarantee violation (#6121) 2018-07-09 17:18:28 -07:00
error.go return Access Denied for invalid SSE keys (#6432) 2018-09-06 12:31:12 -07:00
header.go Use GetObjectNInfo in CopyObject and CopyObjectPart (#6489) 2018-09-25 12:39:46 -07:00
header_test.go Use GetObjectNInfo in CopyObject and CopyObjectPart (#6489) 2018-09-25 12:39:46 -07:00
key.go crypto: add functions for sealing/unsealing the etag for SSE (#6618) 2018-10-16 10:02:19 -07:00
key_test.go crypto: add functions for sealing/unsealing the etag for SSE (#6618) 2018-10-16 10:02:19 -07:00
kms.go crypto: add support for parsing/creating SSE-C/SSE-S3 metadata (#6169) 2018-07-25 13:35:54 -07:00
kms_test.go crypto: add support for parsing/creating SSE-C/SSE-S3 metadata (#6169) 2018-07-25 13:35:54 -07:00
metadata.go crypto: add functions for sealing/unsealing the etag for SSE (#6618) 2018-10-16 10:02:19 -07:00
metadata_test.go crypto: add functions for sealing/unsealing the etag for SSE (#6618) 2018-10-16 10:02:19 -07:00
sse.go crypto: add helper functions for unsealing object keys (#6609) 2018-10-12 18:06:38 -07:00
sse_test.go crypto: add helper functions for unsealing object keys (#6609) 2018-10-12 18:06:38 -07:00
vault.go Add Vault support for custom CAs directory (#6527) 2018-10-01 13:49:10 -07:00