AWS ESDK CLI ciphertext compatibility issue with other language implementations

[marcz88]

Problem:

We've been testing compatibility of the ciphertext between different language implementations of the AWS ESDK This is an very important for us because we have many applications across our company that need to share encrypted data. These applications are written in a number of different language which makes it critical that ciphertext can be created by one language and decrypted by another.

We've confirmed compatibility between python, go, c so far. The CLI however is not compatible. It seems this is because the latest version of the ESDK CLI v4.2.0 requires ESDK v3.3.0. The latest version of the ESDK is 4.0.0 and includes the highly recommended AWS Cryptographic Material Providers Library (MPL).

Is there a plan to update the CLI to use the latest ESDK version?

[lucasmcdonald3]

Hi @marcz88 --

We are planning to upgrade the ESDK CLI to use the latest ESDK Python.

What incompatibility are you finding?

Are you looking to use any MPL-specific components (hierarchical keyring, required encryption context CMM)?
We don't plan to add support for those in the ESDK CLI. We don't consider the ESDK-CLI to be a fully-featured implementation of the ESDK, and won't provide feature parity for the CLI.