|
12 | 12 | - 0.5.0
|
13 | 13 |
|
14 | 14 | - [Encryption context values that are authenticated but not stored with the encrypted message](../changes/2022-11-14_encryption_context_on_decrypt/proposal.md)
|
| 15 | + - Add requirements to specify that Algorithm Suite be ESDK supported |
15 | 16 |
|
16 | 17 | - 0.3.0
|
17 | 18 |
|
@@ -95,6 +96,7 @@ A Keyring that implements the [keyring interface](../framework/keyring-interface
|
95 | 96 | ### Algorithm Suite
|
96 | 97 |
|
97 | 98 | The [algorithm suite](../framework/algorithm-suites.md) that SHOULD be used for encryption.
|
| 99 | +This algorithm suite MUST be [supported for the ESDK](../framework/algorithm-suites.md#supported-algorithm-suites-enum). |
98 | 100 |
|
99 | 101 | ### Frame Length
|
100 | 102 |
|
@@ -145,6 +147,8 @@ This output MAY be satisfied by outputting a [parsed header](#parsed-header) con
|
145 | 147 | The [algorithm suite](../framework/algorithm-suites.md) that is used to encrypt
|
146 | 148 | the input [plaintext ](#plaintext).
|
147 | 149 |
|
| 150 | +This algorithm suite MUST be [supported for the ESDK](../framework/algorithm-suites.md#supported-algorithm-suites-enum). |
| 151 | + |
148 | 152 | This output MAY be satisfied by outputting a [parsed header](#parsed-header) containing this value.
|
149 | 153 |
|
150 | 154 | ### Parsed Header
|
@@ -207,6 +211,8 @@ MUST be the algorithm suite in the [encryption materials](../framework/structure
|
207 | 211 | returned from the [Get Encryption Materials](../framework/cmm-interface.md#get-encryption-materials) call.
|
208 | 212 | Note that the algorithm suite in the retrieved encryption materials MAY be different
|
209 | 213 | from the [input algorithm suite](#algorithm-suite).
|
| 214 | +If this algorithm suite is not [supported for the ESDK](../framework/algorithm-suites.md#supported-algorithm-suites-enum) |
| 215 | +encrypt MUST yield an error. |
210 | 216 | If this [algorithm suite](../framework/algorithm-suites.md) is not supported by the [commitment policy](client.md#commitment-policy)
|
211 | 217 | configured in the [client](client.md) encrypt MUST yield an error.
|
212 | 218 | If the number of [encrypted data keys](../framework/structures.md#encrypted-data-keys) on the [encryption materials](../framework/structures.md#encryption-materials)
|
|
0 commit comments