Support symmetric-encryption-only option, perhaps using ConcatKDFHMAC
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 35/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Quiet
- Tech stack
- javascript
- Domain
- cryptography, security
Research direction
No files, tests, or entry points are named. Start by reviewing the library's existing encryption and key-derivation interfaces, then resolve whether ConcatKDFHMAC and shared HMAC keys are in scope; done should include a defined symmetric-encryption-only API, key-rotation behavior, and tests for deriving content-encryption keys.
Written by the indexing model from the issue text.
Description
A symmetric-encryption-only option should be added allowing for an HMAC key to be used (that could be used via a shared interface protected by zcaps or oauth). This would support applications such as EDVs which already use HMACs for encrypted indexes, but could also use the same HMAC key (simplifying implementations) as a basis for deriving content encryption keys as well.
One consideration regarding using the same HMAC key for deriving CEKs and for indexing is that indexing may have a different rotation schedule (and requires a full duplication of all index values for all EDV documents prior to a switch over.
- Dominant language
- JavaScript
- Stars
- 14
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from digitalbazaar/minimal-cipher
-
Use native ChaCha20-Poly1305 support via the Web Crypto API that is now landing in various platformsOpen
Difficulty 5/5 Over a week Newbie friendliness 20/100
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
-
Difficulty 4/5 3-5 days Newbie friendliness 42/100
-
Difficulty 5/5 Over a week Newbie friendliness 20/100
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
All issues in digitalbazaar/minimal-cipher
Similar issues
-
Add: Digi 4K LogoOpencheck:passed logos:add
Difficulty 1/5 Under an hour Newbie friendliness 82/100
Maintainers usually reply within 1 day
-
component/administration domain/framework needs-triage Platform(Default) priority/low
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
semantic-release/gitlab#1032 ·
-
agent/guide documentation hive/hosted-available-lke648397-260827-5n31
Difficulty 1/5 Under an hour Newbie friendliness 92/100
Maintainers usually reply within 1 day
-
agentic-workflows
Difficulty 1/5 Under an hour Newbie friendliness 85/100
githubnext/gh-aw-workshop#3933 ·
Maintainers usually reply within 1 day