Skip to content

fix Standard TDF rewrap request format#35

Merged
arkavo-com merged 2 commits intomainfrom
fix/rewrap
Jan 15, 2026
Merged

fix Standard TDF rewrap request format#35
arkavo-com merged 2 commits intomainfrom
fix/rewrap

Conversation

@arkavo-com
Copy link
Contributor

  • Use wrappedKey field (not header) for Standard TDF
  • Use alg field (not algorithm) in policyBinding
  • Accept clientPrivateKey parameter for unified signing/ECDH key
  • Use empty salt/info for HKDF in unwrapKey (matches KAS)

- Use wrappedKey field (not header) for Standard TDF
- Use alg field (not algorithm) in policyBinding
- Accept clientPrivateKey parameter for unified signing/ECDH key
- Use empty salt/info for HKDF in unwrapKey (matches KAS)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@arkavo-com arkavo-com changed the title fix(kas): correct Standard TDF rewrap request format fix Standard TDF rewrap request format Jan 15, 2026
- Update Commands.swift to use ephemeral P-256 key for JWT signing
  instead of requiring client public key PEM parameter
- Update main.swift to remove unused clientPublicKey parameter
- Update IntegrationTests to use ephemeral P-256 key for rewrap request
- Fix KASRewrapClientTests to use empty salt matching KAS implementation
- Fix swiftformat lint errors in KASRewrapClient.swift and TDFCrypto.swift

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@sonarqubecloud
Copy link

@arkavo-com arkavo-com merged commit d8ffeff into main Jan 15, 2026
7 checks passed
@arkavo-com arkavo-com deleted the fix/rewrap branch January 15, 2026 03:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant