Want to import key material that is 64 bytes in size into a HMAC_SHA_256 KMS

0

I am attempting to import a 64 byte key for HMAC_SHA_256 KMS, from the cli, and I get the error

An error occurred (InvalidCiphertextException) when calling the ImportKeyMaterial operation:

I have run the same commands with a 32 byte key without issue, and the documentation from AWS implies that they only support 32 byte keys for SHA_256, 64 byte for SHA_512 etc.

However, as per the HMAC_SHA_256 spec, it has a block size of 512 bit, and can therefore support keys of up to 64 bit without issue (and larger, but will , and in fact Java, C# etc all support this. Why doesn't AWS allow this?

Angus
asked 6 months ago83 views
No Answers

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions