Disallow FLE2 substring/suffix/prefix field inserts where the encrypted tokens is of the wrong length

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Fixed
    • Priority: Major - P3
    • 8.3.0-rc0, 8.2.0-rc2
    • Affects Version/s: None
    • Component/s: None
    • None
    • Server Security
    • Fully Compatible
    • v8.2
    • Server Security 2025-08-01
    • None
    • 3
    • TBD
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      We currently allow insertions of substring/suffix/prefix fields where the encrypted tokens (from the InsertUpdatePayload's text token sets) don't have the correct size (i.e. do not include the msize field). This means that the ECOC documents for these values will be treated as if they're equality fields during compaction.  We should throw an error to indicate to users that the libmongocrypt version being used is no longer compatible.

              Assignee:
              Gabriel Marks
              Reporter:
              Erwin Pe
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: