Details
-
Task
-
Resolution: Fixed
-
Major - P3
-
None
-
None
-
None
-
Major Change
-
Security 2022-02-21, Security 2022-03-07, Security 2022-03-21
-
167
Description
Encryption:
The ImplicitEncryptedDBClientBase::preprocessRequest should call FLEClientCrypto::generateInsertOrUpdateFromPlaceholders (or its successor) after doing its FLE 1 processing.
Decryption:
The EncryptedDBClientBase::processResponse should call FLEClientCrypto::decryptDocument to decrypt FLE 2 documents.
While this will require two passes over the BSONObj in each case, I am not concerned about the perf since this code is only for testing.
Attachments
Issue Links
- causes
-
SERVER-64427 Init-order fiasco in secure_allocator
-
- Closed
-