Skip to content

remove _finalIvs field from the instances#10077

Open
abdulkadir-tutao wants to merge 2 commits intomasterfrom
remove-final-ivs
Open

remove _finalIvs field from the instances#10077
abdulkadir-tutao wants to merge 2 commits intomasterfrom
remove-final-ivs

Conversation

@abdulkadir-tutao
Copy link
Contributor

Previously, we needed to persist the initialization vectors for encrypted final fields to make sure that we get the same ciphertext when we encrypt them so that we could verify that these fields didn't change during a resource update (PUT). Final fields are the fields that cannot be modified by the client. As we do not do PUT requests for resource updates and send only the changed fields with a PATCH request, we don't need to persist the initialization vectors on the instance anymore.

Copy link
Contributor

@charlag charlag left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

finally, makes things so much simpler!

@tuta-sudipg tuta-sudipg force-pushed the remove-final-ivs branch 3 times, most recently from eda6a23 to 3addb87 Compare December 12, 2025 14:28
Copy link
Contributor

@vaf-hub vaf-hub left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, I appreciate it. This makes re-encryption a lot less error prone when copying ATs in an instance for example which might lead to re-usal of IVs.

I commented with a few question but in general: LGTM

abdulkadir-tutao and others added 2 commits December 15, 2025 17:18
Previously, we needed to persist the initialization vectors for
encrypted final fields to make sure that we get the same ciphertext
when we encrypt them so that we could verify that these fields didn't
change during a resource update (PUT). Final fields are the fields that
cannot be modified by the client. As we do not do PUT requests for
resource updates and send only the changed fields with a PATCH request,
we don't need to persist the initialization vectors on the instance
anymore.

Co-authored-by: das <das@tutao.de>
Co-authored-by: jomapp <17314077+jomapp@users.noreply.github.com>
Co-authored-by: abp <abp@tutao.de>
Co-authored-by: das <das@tutao.de>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants