Skip to content

Commit

Permalink
chore(aws-kms-rsa-keyring.md): Updated security consideration spec
Browse files Browse the repository at this point in the history
  • Loading branch information
RitvikKapila committed May 4, 2024
1 parent ceef872 commit 79ea53e
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions framework/aws-kms/aws-kms-rsa-keyring.md
Original file line number Diff line number Diff line change
Expand Up @@ -246,7 +246,7 @@ with asymmetric signing.
In order to avoid an expensive cryptographic calculation,
as well as to avoid cases where the customer may be misinterpreting
the intent of the signature algorithm,
the AWS KMS Keyring rejects any material containing an algorithm suite
the AWS KMS RSA Keyring rejects any material containing an algorithm suite
with asymmetric signing.

A similar situation exists in the [Raw AES Keyring](../raw-rsa-keyring.md)
Expand All @@ -255,7 +255,7 @@ With the Raw RSA Keyring, the material used on encrypt is public,
so there is no set up in which it makes sense to use an algorithm suite
with asymmetric signing.
With the Raw AES Keyring, because the Keyring requires
the AWS symmetric key for decryption to be available in memory
the AES symmetric key for decryption to be available in memory
(as opposed to calling out for the decryption to happen via an HSM,
which may have access control on it),
decrypt access necessarially implies encrypt access.
Expand Down

0 comments on commit 79ea53e

Please sign in to comment.