@@ -53,7 +53,6 @@ module AwsCryptographyDbEncryptionSdkDynamoDbOperations refines AbstractAwsCrypt
53
53
match input. input
54
54
{
55
55
// = specification/dynamodb-encryption-client/ddb-get-encrypted-data-key-description.md#behavior
56
- // = type=implication
57
56
// # - If the input is a encrypted DynamoDB item, it MUST attempt to extract "aws_dbe_head" attribute from the DynamoDB item to get binary header.
58
57
case plaintextItem (plainTextItem) => {
59
58
:- Need ("aws_dbe_head" in plainTextItem && plainTextItem["aws_dbe_head"].B?, E("Header not found in the DynamoDB item."));
@@ -63,16 +62,13 @@ module AwsCryptographyDbEncryptionSdkDynamoDbOperations refines AbstractAwsCrypt
63
62
header := headerItem;
64
63
}
65
64
// = specification/dynamodb-encryption-client/ddb-get-encrypted-data-key-description.md#behavior
66
- // = type=implication
67
65
// # - This operation MUST deserialize the header bytes according to the header format.
68
66
var deserializedHeader :- Header. PartialDeserialize (header). MapFailure (e => AwsCryptographyDbEncryptionSdkStructuredEncryption(e));
69
67
// = specification/dynamodb-encryption-client/ddb-get-encrypted-data-key-description.md#behavior
70
- // = type=implication
71
68
// # - This operation MUST extract the dataKeys from the deserialize header.
72
69
var datakeys := deserializedHeader. dataKeys;
73
70
var list : EncryptedDataKeyDescriptionList := [];
74
71
// = specification/dynamodb-encryption-client/ddb-get-encrypted-data-key-description.md#behavior
75
- // = type=implication
76
72
// # - For every Data Key in Data Keys, the operation MUST attempt to extract a description of the Data Key.
77
73
for i := 0 to |datakeys| {
78
74
var extractedKeyProviderId :- UTF8. Decode (datakeys[i].keyProviderId). MapFailure (e => E(e));
@@ -82,7 +78,6 @@ module AwsCryptographyDbEncryptionSdkDynamoDbOperations refines AbstractAwsCrypt
82
78
:- Need (deserializedHeader.flavor == 0 || deserializedHeader.flavor == 1, E("Invalid format flavor."));
83
79
var algorithmSuite;
84
80
// = specification/dynamodb-encryption-client/ddb-get-encrypted-data-key-description.md#behavior
85
- // = type=implication
86
81
// # - This operation MUST extract the Format Flavor from the deserialize header.
87
82
if deserializedHeader. flavor == 0{
88
83
algorithmSuite := AlgorithmSuites. DBE_ALG_AES_256_GCM_HKDF_SHA512_COMMIT_KEY_SYMSIG_HMAC_SHA384;
0 commit comments