Skip to content

Commit d48669a

Browse files
authored
Update client-side-encryption.md
Add chunk size information for CSEv2.
1 parent e8fe0eb commit d48669a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/storage/blobs/client-side-encryption.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -91,7 +91,7 @@ Decryption via the envelope technique works as follows:
9191

9292
### Encryption/decryption on blob upload/download
9393

94-
The Blob Storage client library supports encryption of whole blobs only on upload. For downloads, both complete and range downloads are supported.
94+
The Blob Storage client library supports encryption of whole blobs only on upload. For downloads, both complete and range downloads are supported. Client-side encryption v2 chunks data into 4MB buffered authenticated encryption blocks which can only be transformed whole.
9595

9696
During encryption, the client library generates a random initialization vector (IV) of 16 bytes and a random CEK of 32 bytes, and performs envelope encryption of the blob data using this information. The wrapped CEK and some additional encryption metadata are then stored as blob metadata along with the encrypted blob.
9797

0 commit comments

Comments
 (0)