Details
-
Task
-
Resolution: Fixed
-
Major - P3
-
None
-
None
-
None
-
None
Description
For simplicity, just before encrypting data we wrap it in a document with an empty key. I.e. to encrypt the BSON uint8_t value 10, we really encrypt the bytes for the BSON document:
{ "" : 10 }
|
It's wasteful, but was simpler to implement in the beginning. Fixing this doesn't change any API from driver's perspective, but does change the ciphertext.