Skip to content

Commit 06c3588

Browse files
author
Daniel
authored
Add A128KW, A192KW, and A256KW algorithms (airsidemobile#211)
* Add key wrapping * Add key unwrapping * Adapt and extend tests * Add checkmarks in readme * Adapt readme * Add greeting * Remove danger and make sonarqube a separate job * Fix workspace directory * Use workspaces for inter workflow caching * Install brew dependencies * Add missing file headers * Try to persist all brew dependnecies * Install sonar scanner for testing * Install sonar scanner directly * Fix soanrqube cache key * Try to cache brew downloads * Quote brewfile * Cache cellar * Log time * Run sq in tests job * Run sonarqube alone * Fix config * Add linting job * Don't auto update homebrew * Depend on dep * Fix config * Persis lint results * Exclude linting deps * Fix stupid mistake * Don't run sonarcloud on forked pull requests * Run danger * Fix config * Fix config * simplify to one job * fix gems path * Set fetch depth * Remove danger * Replace deprecated cc aes alg * Rename key wrap funcs * Improve guards * Remove unneeded .direct checks * Make switching in tests more explicit
1 parent d5e7f39 commit 06c3588

19 files changed

+1062
-226
lines changed

‎.circleci/config.yml

+41-15
Original file line numberDiff line numberDiff line change
@@ -23,50 +23,76 @@ jobs:
2323
key: gem-cache-v2-{{ checksum "Gemfile.lock" }}
2424
paths:
2525
- vendor/bundle
26+
- persist_to_workspace:
27+
root: .
28+
paths:
29+
- vendor/bundle
2630

2731
test:
2832
executor: mac-executor
2933
steps:
3034
- checkout
31-
- restore_cache:
32-
keys:
33-
- gem-cache-v2-{{ checksum "Gemfile.lock" }}
34-
- gem-cache-v2
35+
- attach_workspace:
36+
at: ~/joseswift
3537
- run:
3638
name: Test
3739
command: |
3840
bundle config --local path vendor/bundle
3941
bundle exec fastlane test
42+
- store_test_results:
43+
path: fastlane/test_output
44+
- persist_to_workspace:
45+
root: .
46+
paths:
47+
- fastlane/test_output/derived_data/Logs/Test/
48+
49+
lint:
50+
executor: mac-executor
51+
steps:
52+
- checkout
53+
- attach_workspace:
54+
at: ~/joseswift
4055
- run:
41-
name: Sonarqube
56+
name: Lint
4257
command: |
58+
HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_INSTALL_CLEANUP=1 brew install swiftlint --display-times || true
4359
bundle config --local path vendor/bundle
44-
bundle exec fastlane sonarqube
60+
bundle exec fastlane lint strict:true
4561
- store_test_results:
4662
path: fastlane/test_output
4763

48-
danger:
64+
65+
sonarqube:
4966
executor: mac-executor
5067
steps:
5168
- checkout
52-
- restore_cache:
53-
keys:
54-
- gem-cache-v2-{{ checksum "Gemfile.lock" }}
55-
- gem-cache-v2
69+
- attach_workspace:
70+
at: ~/joseswift
5671
- run:
57-
name: Danger
72+
name: Sonarqube
5873
command: |
74+
if [ -z "$FL_SONAR_LOGIN" ]; then
75+
echo "No Sonarcloud token is set. Failing."
76+
exit 1;
77+
fi
78+
HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_INSTALL_CLEANUP=1 brew install sonar-scanner --display-times || true
5979
bundle config --local path vendor/bundle
60-
bundle exec danger
80+
bundle exec fastlane sonarqube
6181
6282
workflows:
6383
version: 2
6484
test_and_lint:
6585
jobs:
6686
- install_dependendies
67-
- test:
87+
- lint:
6888
requires:
6989
- install_dependendies
70-
- danger:
90+
- test:
7191
requires:
7292
- install_dependendies
93+
- sonarqube:
94+
requires:
95+
- test
96+
filters:
97+
branches:
98+
ignore: /pull\/[0-9]+/ # Forked pull requests

‎.swiftlint.yml

+6
Original file line numberDiff line numberDiff line change
@@ -23,3 +23,9 @@ opt_in_rules:
2323

2424
line_length:
2525
ignores_comments: true
26+
27+
included:
28+
- JOSESwift/Sources
29+
- Tests
30+
excluded:
31+
- vendor

‎Dangerfile

+8
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,11 @@
1+
# ------------------------------------------------------------------------------
2+
# Say thanks!
3+
# ------------------------------------------------------------------------------
4+
5+
unless github.api.organization_member?('airsidemobile', github.pr_author)
6+
message "Thanks for your contribution @#{github.pr_author}! :tada: You'll hear back from us soon."
7+
end
8+
19
# ------------------------------------------------------------------------------
210
# Do you have style?
311
# ------------------------------------------------------------------------------

‎JOSESwift.xcodeproj/project.pbxproj

+24
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,7 @@
3232
5FB76E6F2080BEC6B63939D6 /* ECSigner.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5FB76AF2833DDD77D56D6D3F /* ECSigner.swift */; };
3333
5FB76E7A42B44E4F4416CB7F /* JWKECKeysTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5FB7688B4092265A9A950E9E /* JWKECKeysTests.swift */; };
3434
5FB76E7BEF001684139C9E14 /* ECCryptoTestCase.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5FB76BD4F46045BF2B182483 /* ECCryptoTestCase.swift */; };
35+
6501503723FBDB42000D7D0B /* AESKeyWrapKeyManagementModeTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6501503623FBDB42000D7D0B /* AESKeyWrapKeyManagementModeTests.swift */; };
3536
6506D9E920F4CA2000F34DD8 /* SymmetricKeyTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6506D9E820F4CA2000F34DD8 /* SymmetricKeyTests.swift */; };
3637
65125A321FBF85FA007CF3AE /* JWSDeserializationTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 65125A311FBF85FA007CF3AE /* JWSDeserializationTests.swift */; };
3738
6514ADC92031DD15008A4DD3 /* ASN1DEREncoding.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6514ADC82031DD15008A4DD3 /* ASN1DEREncoding.swift */; };
@@ -61,6 +62,7 @@
6162
6571F6231F7BF786004D53C5 /* JWSHeader.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6571F6221F7BF786004D53C5 /* JWSHeader.swift */; };
6263
6572C2F21F96428800D4186D /* Decrypter.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6572C2F11F96428800D4186D /* Decrypter.swift */; };
6364
6575696D203EF9CE004A0EFD /* JWSValidationTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6575696C203EF9CE004A0EFD /* JWSValidationTests.swift */; };
65+
657D0F7723FAE857004A7975 /* AESKeyWrappingMode.swift in Sources */ = {isa = PBXBuildFile; fileRef = 657D0F7623FAE857004A7975 /* AESKeyWrappingMode.swift */; };
6466
658261492029E2D200B594ED /* SecKeyRSAPublicKeyTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 658261482029E2D200B594ED /* SecKeyRSAPublicKeyTests.swift */; };
6567
6582614D2029E98A00B594ED /* DataRSAPublicKey.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6582614C2029E98A00B594ED /* DataRSAPublicKey.swift */; };
6668
6582614F2029F2D100B594ED /* ASN1DERParsing.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6582614E2029F2D100B594ED /* ASN1DERParsing.swift */; };
@@ -85,6 +87,8 @@
8587
65E733D11FEBF7960009EAC6 /* JWKParameters.swift in Sources */ = {isa = PBXBuildFile; fileRef = 65E733D01FEBF7960009EAC6 /* JWKParameters.swift */; };
8688
65E733D31FEBFDB30009EAC6 /* JWKtoJSONTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 65E733D21FEBFDB30009EAC6 /* JWKtoJSONTests.swift */; };
8789
65E733D51FEC031B0009EAC6 /* JWKRSAKeysTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 65E733D41FEC031B0009EAC6 /* JWKRSAKeysTests.swift */; };
90+
65F2558E23FBE6E000A3FC44 /* JWEAESKeyWrapTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 65F2558D23FBE6E000A3FC44 /* JWEAESKeyWrapTests.swift */; };
91+
65F2559023FBE75300A3FC44 /* AESKeyWrapTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 65F2558F23FBE75300A3FC44 /* AESKeyWrapTests.swift */; };
8892
65F44EB11FE2D941000C5EA0 /* JWK.swift in Sources */ = {isa = PBXBuildFile; fileRef = 65F44EB01FE2D941000C5EA0 /* JWK.swift */; };
8993
65F44EB31FE2E1C6000C5EA0 /* RSAKeys.swift in Sources */ = {isa = PBXBuildFile; fileRef = 65F44EB21FE2E1C6000C5EA0 /* RSAKeys.swift */; };
9094
65FBFDE71F45CC7C005C7D68 /* JOSESwift.h in Headers */ = {isa = PBXBuildFile; fileRef = 65FBFDE51F45CC7C005C7D68 /* JOSESwift.h */; settings = {ATTRIBUTES = (Public, ); }; };
@@ -153,6 +157,7 @@
153157
5FB76E4A3A52AAC72B1F33F0 /* SecKeyECPrivateKey.swift */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.swift; path = SecKeyECPrivateKey.swift; sourceTree = "<group>"; };
154158
5FB76E8AD96EA19B669A5E1D /* ECPublicKeyToSecKeyTests.swift */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.swift; path = ECPublicKeyToSecKeyTests.swift; sourceTree = "<group>"; };
155159
5FB76EBD36093E9EC475BC2B /* ECKeyCodable.swift */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.swift; path = ECKeyCodable.swift; sourceTree = "<group>"; };
160+
6501503623FBDB42000D7D0B /* AESKeyWrapKeyManagementModeTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AESKeyWrapKeyManagementModeTests.swift; sourceTree = "<group>"; };
156161
6506D9E820F4CA2000F34DD8 /* SymmetricKeyTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = SymmetricKeyTests.swift; sourceTree = "<group>"; };
157162
65125A311FBF85FA007CF3AE /* JWSDeserializationTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = JWSDeserializationTests.swift; sourceTree = "<group>"; };
158163
6514ADC82031DD15008A4DD3 /* ASN1DEREncoding.swift */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.swift; path = ASN1DEREncoding.swift; sourceTree = "<group>"; };
@@ -182,6 +187,7 @@
182187
6571F6221F7BF786004D53C5 /* JWSHeader.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = JWSHeader.swift; sourceTree = "<group>"; };
183188
6572C2F11F96428800D4186D /* Decrypter.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = Decrypter.swift; sourceTree = "<group>"; };
184189
6575696C203EF9CE004A0EFD /* JWSValidationTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = JWSValidationTests.swift; sourceTree = "<group>"; };
190+
657D0F7623FAE857004A7975 /* AESKeyWrappingMode.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AESKeyWrappingMode.swift; sourceTree = "<group>"; };
185191
658261482029E2D200B594ED /* SecKeyRSAPublicKeyTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = SecKeyRSAPublicKeyTests.swift; sourceTree = "<group>"; };
186192
6582614C2029E98A00B594ED /* DataRSAPublicKey.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = DataRSAPublicKey.swift; sourceTree = "<group>"; };
187193
6582614E2029F2D100B594ED /* ASN1DERParsing.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ASN1DERParsing.swift; sourceTree = "<group>"; };
@@ -207,6 +213,8 @@
207213
65E733D01FEBF7960009EAC6 /* JWKParameters.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = JWKParameters.swift; sourceTree = "<group>"; };
208214
65E733D21FEBFDB30009EAC6 /* JWKtoJSONTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = JWKtoJSONTests.swift; sourceTree = "<group>"; };
209215
65E733D41FEC031B0009EAC6 /* JWKRSAKeysTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = JWKRSAKeysTests.swift; sourceTree = "<group>"; };
216+
65F2558D23FBE6E000A3FC44 /* JWEAESKeyWrapTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = JWEAESKeyWrapTests.swift; sourceTree = "<group>"; };
217+
65F2558F23FBE75300A3FC44 /* AESKeyWrapTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AESKeyWrapTests.swift; sourceTree = "<group>"; };
210218
65F44EB01FE2D941000C5EA0 /* JWK.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = JWK.swift; sourceTree = "<group>"; };
211219
65F44EB21FE2E1C6000C5EA0 /* RSAKeys.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = RSAKeys.swift; sourceTree = "<group>"; };
212220
65FBFDE21F45CC7C005C7D68 /* JOSESwift.framework */ = {isa = PBXFileReference; explicitFileType = wrapper.framework; includeInIndex = 0; path = JOSESwift.framework; sourceTree = BUILT_PRODUCTS_DIR; };
@@ -280,10 +288,12 @@
280288
8A30B8F922118FE6001834E3 /* JWECompressionTests.swift */,
281289
65676D8A1FC220C70031B26D /* JWEDeserializationTests.swift */,
282290
C803EFEC1FA8849C00B71335 /* JWERSATests.swift */,
291+
65F2558D23FBE6E000A3FC44 /* JWEAESKeyWrapTests.swift */,
283292
C803EFEE1FA884C100B71335 /* JWEHeaderTests.swift */,
284293
653365E420ECCB71002630D7 /* JWEDirectEncryptionTests.swift */,
285294
65A9EE4A20FDD7A900E9C566 /* EncrypterDecrypterInitializationTests.swift */,
286295
65B5B93D23F55978009C8396 /* RSAKeyManagementModeTests.swift */,
296+
6501503623FBDB42000D7D0B /* AESKeyWrapKeyManagementModeTests.swift */,
287297
C86AC8CA1FCEC20F0007E611 /* AESCBCContentEncryptionTests.swift */,
288298
C83070041FD1B7390068C5CB /* AESCBCContentDecryptionTests.swift */,
289299
65B5B93F23F5604A009C8396 /* DirectEncryptionKeyManagementModeTests.swift */,
@@ -304,6 +314,7 @@
304314
5FB76BD4F46045BF2B182483 /* ECCryptoTestCase.swift */,
305315
5FB768A267E1A15571CC58AA /* ECVerifierTests.swift */,
306316
5FB76B5896AAA87ACD56D0D0 /* ECSignerTests.swift */,
317+
65F2558F23FBE75300A3FC44 /* AESKeyWrapTests.swift */,
307318
);
308319
name = Crypto;
309320
sourceTree = "<group>";
@@ -351,6 +362,7 @@
351362
children = (
352363
6558164923F456F700EA5FEC /* KeyManagementMode.swift */,
353364
6558164123F4390D00EA5FEC /* KeyEncryption */,
365+
657D0F7523FAE4B5004A7975 /* KeyWrapping */,
354366
6558164223F44E4700EA5FEC /* DirectEncryption */,
355367
);
356368
name = KeyManagementMode;
@@ -373,6 +385,14 @@
373385
name = AESCBCEncryption;
374386
sourceTree = "<group>";
375387
};
388+
657D0F7523FAE4B5004A7975 /* KeyWrapping */ = {
389+
isa = PBXGroup;
390+
children = (
391+
657D0F7623FAE857004A7975 /* AESKeyWrappingMode.swift */,
392+
);
393+
name = KeyWrapping;
394+
sourceTree = "<group>";
395+
};
376396
6582C0BB1F4B09DC00B153D5 /* Common */ = {
377397
isa = PBXGroup;
378398
children = (
@@ -713,8 +733,10 @@
713733
65A9EE4B20FDD7A900E9C566 /* EncrypterDecrypterInitializationTests.swift in Sources */,
714734
653365E520ECCB71002630D7 /* JWEDirectEncryptionTests.swift in Sources */,
715735
6506D9E920F4CA2000F34DD8 /* SymmetricKeyTests.swift in Sources */,
736+
6501503723FBDB42000D7D0B /* AESKeyWrapKeyManagementModeTests.swift in Sources */,
716737
65684A4D2031935200E56C68 /* RSAPublicKeyToDataTests.swift in Sources */,
717738
6575696D203EF9CE004A0EFD /* JWSValidationTests.swift in Sources */,
739+
65F2559023FBE75300A3FC44 /* AESKeyWrapTests.swift in Sources */,
718740
65A103A1202B03BB00D22BF5 /* ASN1DERParsingTests.swift in Sources */,
719741
C803EFEF1FA884C100B71335 /* JWEHeaderTests.swift in Sources */,
720742
C81DD92A1FD7096B00026024 /* HMACTests.swift in Sources */,
@@ -740,6 +762,7 @@
740762
5FB765B31F9CC56B6E74E402 /* DataECPublicKeyTests.swift in Sources */,
741763
5FB769DC2B585672F9EC125A /* ECPublicKeyToDataTests.swift in Sources */,
742764
5FB763971FFFFDE2B2376E0A /* ECPublicKeyToSecKeyTests.swift in Sources */,
765+
65F2558E23FBE6E000A3FC44 /* JWEAESKeyWrapTests.swift in Sources */,
743766
5FB7692ED087062737C589E2 /* SecKeyECPublicKeyTests.swift in Sources */,
744767
5FB76834DC4275C5B7D2F742 /* JWSECTests.swift in Sources */,
745768
5FB76E7A42B44E4F4416CB7F /* JWKECKeysTests.swift in Sources */,
@@ -774,6 +797,7 @@
774797
65F44EB31FE2E1C6000C5EA0 /* RSAKeys.swift in Sources */,
775798
652F6DE91F73E6780002DEE0 /* Serializer.swift in Sources */,
776799
65A7A1991F7295F5009449E7 /* Payload.swift in Sources */,
800+
657D0F7723FAE857004A7975 /* AESKeyWrappingMode.swift in Sources */,
777801
C81DD9281FD7096100026024 /* HMAC.swift in Sources */,
778802
6558164D23F45CC200EA5FEC /* ContentEncryption.swift in Sources */,
779803
6571F6231F7BF786004D53C5 /* JWSHeader.swift in Sources */,

‎JOSESwift/Sources/AESKeyWrappingMode.swift

+74
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
1+
//
2+
// AESKeyWrappingMode.swift
3+
// JOSESwift
4+
//
5+
// Created by Daniel Egger on 17.02.20.
6+
//
7+
// ---------------------------------------------------------------------------
8+
// Copyright 2020 Airside Mobile Inc.
9+
//
10+
// Licensed under the Apache License, Version 2.0 (the "License");
11+
// you may not use this file except in compliance with the License.
12+
// You may obtain a copy of the License at
13+
//
14+
// http://www.apache.org/licenses/LICENSE-2.0
15+
//
16+
// Unless required by applicable law or agreed to in writing, software
17+
// distributed under the License is distributed on an "AS IS" BASIS,
18+
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19+
// See the License for the specific language governing permissions and
20+
// limitations under the License.
21+
// ---------------------------------------------------------------------------
22+
//
23+
24+
import Foundation
25+
26+
/// A key management mode in which the content encryption key value is encrypted to the intended recipient using a
27+
/// symmetric key wrapping algorithm.
28+
struct AESKeyWrappingMode {
29+
typealias KeyType = AES.KeyType
30+
31+
private let keyManagementAlgorithm: KeyManagementAlgorithm
32+
private let contentEncryptionAlgorithm: ContentEncryptionAlgorithm
33+
private let sharedSymmetricKey: KeyType
34+
35+
init(
36+
keyManagementAlgorithm: KeyManagementAlgorithm,
37+
contentEncryptionAlgorithm: ContentEncryptionAlgorithm,
38+
sharedSymmetricKey: KeyType
39+
) {
40+
self.keyManagementAlgorithm = keyManagementAlgorithm
41+
self.contentEncryptionAlgorithm = contentEncryptionAlgorithm
42+
self.sharedSymmetricKey = sharedSymmetricKey
43+
}
44+
}
45+
46+
extension AESKeyWrappingMode: EncryptionKeyManagementMode {
47+
func determineContentEncryptionKey() throws -> (contentEncryptionKey: Data, encryptedKey: Data) {
48+
let contentEncryptionKey = try SecureRandom.generate(count: contentEncryptionAlgorithm.keyLength)
49+
50+
let encryptedKey = try AES.wrap(
51+
rawKey: contentEncryptionKey,
52+
keyEncryptionKey: sharedSymmetricKey,
53+
algorithm: keyManagementAlgorithm
54+
)
55+
56+
return (contentEncryptionKey, encryptedKey)
57+
}
58+
}
59+
60+
extension AESKeyWrappingMode: DecryptionKeyManagementMode {
61+
func determineContentEncryptionKey(from encryptedKey: Data) throws -> Data {
62+
let contentEncryptionKey = try AES.unwrap(
63+
wrappedKey: encryptedKey,
64+
keyEncryptionKey: sharedSymmetricKey,
65+
algorithm: keyManagementAlgorithm
66+
)
67+
68+
guard contentEncryptionKey.count == contentEncryptionAlgorithm.keyLength else {
69+
throw AESError.keyLengthNotSatisfied
70+
}
71+
72+
return contentEncryptionKey
73+
}
74+
}

‎JOSESwift/Sources/Algorithms.swift

+6
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,12 @@ public enum KeyManagementAlgorithm: String, CaseIterable {
5858
case RSAOAEP = "RSA-OAEP"
5959
/// Key encryption using RSAES OAEP using SHA-256 and MGF1 with SHA-256
6060
case RSAOAEP256 = "RSA-OAEP-256"
61+
// Key wrapping using AES Key Wrap with default initial value using 128-bit key
62+
case A128KW
63+
// Key wrapping using AES Key Wrap with default initial value using 192-bit key
64+
case A192KW
65+
// Key wrapping using AES Key Wrap with default initial value using 1256-bit key
66+
case A256KW
6167
/// Direct encryption using a shared symmetric key as the content encryption key
6268
case direct = "dir"
6369
}

0 commit comments

Comments
 (0)