Want to import key material that is 64 bytes in size into a HMAC_SHA_256 KMS

0

I am attempting to import a 64 byte key for HMAC_SHA_256 KMS, from the cli, and I get the error

An error occurred (InvalidCiphertextException) when calling the ImportKeyMaterial operation:

I have run the same commands with a 32 byte key without issue, and the documentation from AWS implies that they only support 32 byte keys for SHA_256, 64 byte for SHA_512 etc.

However, as per the HMAC_SHA_256 spec, it has a block size of 512 bit, and can therefore support keys of up to 64 bit without issue (and larger, but will , and in fact Java, C# etc all support this. Why doesn't AWS allow this?

Angus
已提問 6 個月前檢視次數 93 次
沒有答案

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南