Details
-
Bug
-
Resolution: Fixed
-
Critical - P2
-
None
-
None
-
None
-
None
Description
libmongocrypt strips away non-matching binData for auto encryption (i.e. not a marking|ciphertext during encryption|decryption). So code like the following:
db.test.insert({auto_encrypted: 123, explicitly_encrypted: ce.encrypt(123, opts) })
|
... will silently strip the "explicitly_encrypted" field in the insert command.