Replies: 2 comments
-
@sbking You are right, 16 bytes doesn't throw an error and will hash to 12 bytes internally. We'll modify it to use 12 bytes, it shouldn't affect already encrypted data since the iv is stored and read back from the record during decryption. |
Beta Was this translation helpful? Give feedback.
0 replies
-
Fixed in https://github.com/boxyhq/jackson/releases/tag/v1.28.1 |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Regarding the database encryption using aes-256-gcm, the initialization vector is 16 bytes: https://github.com/boxyhq/jackson/blob/main/npm/src/db/encrypter.ts#L8
But every resource I can find suggests you should stick to the standard of 12 bytes for the IV. For example see MDN: https://developer.mozilla.org/en-US/docs/Web/API/AesGcmParams#iv
Beta Was this translation helpful? Give feedback.
All reactions