[CDRIVER-4369] Add Queryable Encryption API to AutoEncryptionOpts Created: 27/Apr/22  Updated: 28/Oct/23  Resolved: 14/May/22

Status: Closed
Project: C Driver
Component/s: None
Affects Version/s: None
Fix Version/s: 1.22.0, 1.22.0-beta0

Type: Spec Change Priority: Unknown
Reporter: PM Bot Assignee: Kevin Albertson
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
is depended on by PHPC-2085 autoEncryption options for queryable ... Closed
Issue split
Related
Epic Link: FLE 2.0 Support
Quarter: FY23Q2
Upstream Changes Summary:

DRIVERS-2297:
Please see https://github.com/mongodb/specifications/pull/1195 and https://github.com/mongodb/specifications/pull/1214 for the specification changes.

Please update the tests to this commit, which includes test fixes:
https://github.com/mongodb/specifications/commit/c3784d44555752bb058993e7b0bb51cab5b3b1d5

Please see the Go driver implementation for reference.

Bindings changes

Upgrade libmongocrypt dependency to 1.5.0. Drivers can use 1.5.0-alpha0 to test. Binaries are available from this upload-all task.

Update the bindings to libmongocrypt to add the new functions: mongocrypt_setopt_encrypted_field_config_map and mongocrypt_setopt_bypass_query_analysis.

Drivers that implement crypto callbacks (C#, Java, Node.js, Python, Ruby) need to wrap the new crypto callback: mongocrypt_setopt_aes_256_ctr.

Drivers languages that do not support CTR mode may alternatively wrap mongocrypt_setopt_aes_256_ecb. From this survey, this may only be C#.

Driver changes

Add the new driver API options: AutoEncryptionOpts.encryptedFieldsMap and AutoEncryptionOpts.bypassQueryAnalysis.

Pass AutoEncryptionOpts.encryptedFieldsMap to libmongocrypt with mongocrypt_setopt_encrypted_field_config_map.

If AutoEncryptionOpts.bypassQueryAnalysis is true, call the libmongocrypt function mongocrypt_setopt_bypass_query_analysis.

Test changes

Add encrypted_fields to the CSFLE specification test format.

Sync the added CSFLE specification tests.


 Description   

This ticket was split from DRIVERS-2297, please see that ticket for a detailed description.



 Comments   
Comment by Githook User [ 14/May/22 ]

Author:

{'name': 'Kevin Albertson', 'email': 'kevin.albertson@mongodb.com', 'username': 'kevinAlbs'}

Message: CDRIVER-4369 Add FLE 2 API to AutoEncryptionOpts (#989)

  • do not return error on "ns not found" error in drop with encryptedFields
  • use assert_match_bson, not ASSERT(match_bson
  • pass encrypted_fields_map to libmongocrypt
  • add mongoc_auto_encryption_opts_set_bypass_query_analysis
  • require libmongocrypt 1.5.0
  • update csfle test dependency to 6.0.0-rc4
Generated at Wed Feb 07 21:20:43 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.