Want to import key material that is 64 bytes in size into a HMAC_SHA_256 KMS

0

I am attempting to import a 64 byte key for HMAC_SHA_256 KMS, from the cli, and I get the error

An error occurred (InvalidCiphertextException) when calling the ImportKeyMaterial operation:

I have run the same commands with a 32 byte key without issue, and the documentation from AWS implies that they only support 32 byte keys for SHA_256, 64 byte for SHA_512 etc.

However, as per the HMAC_SHA_256 spec, it has a block size of 512 bit, and can therefore support keys of up to 64 bit without issue (and larger, but will , and in fact Java, C# etc all support this. Why doesn't AWS allow this?

Angus
posta 6 mesi fa92 visualizzazioni
Nessuna risposta

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande