Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[KeyVault] - AES-CBC-PAD cryptography support (#14144)
## What - Add AESCBCPAD basic crypto support (just encrypt / decrypt for now) locally ## Why We're working towards implementing as many algorithms as we can locally without implementing our own cryptography. This commit allows us to perform encryption and decryption locally using AES symmetric keys. ## Callouts - Wrap / unwrap currently not implemented locally. I'm investigating whether node8 crypto can support it. Right now, it appears that while the underlying wrap/unwrap algorithms do not require an IV, node crypto does and will error if one is not supplied. While that investigation is ongoing we at least can support encrypt / decrypt locally - Since key export is not available I generate my own key and import it. Because of the recorder I had to make it as predictable and consistent as possible for tests - Node crypto doesn't have support for multiple padding modes as far as I can see, it only has auto padding enabled or disabled. Therefore it's not trivial to implement AESCBC (zero-padded).
- Loading branch information