Skip to content

potential issue with large reads on nonframed messages #53

Open
@mattsb42-aws

Description

@mattsb42-aws

In tracking down an issue in an unrelated codebase, I discovered that at least in some cases, passing more than 2GiB to the pyca/cryptography Cipher.update() methods can cause issues with the underlying OpenSSL implementation.

This is not an issue with framed messages because our max frame size is 2GiB, but could be an issue for nonframed messages larger than 2GiB.

We should add tests that check for this edge case, and if it is an issue we can add chunking logic.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions