Skip to content

Conversation

@Mehrn0ush
Copy link
Contributor

As discussed in ticket #752, this PR fixes a data-quality issue in the Cryptography Registry.

Fixes #752

Details

  • Removes a duplicate BLAKE2b-(160|256|384|512)-HMAC variant entry (primitive: mac)

Scope

  • Cryptography Registry data only (schema/cryptography-defs.json)
  • No schema or specification behavior changes

@Mehrn0ush Mehrn0ush requested a review from a team as a code owner December 30, 2025 17:31
@stevespringett
Copy link
Member

cc: @bhess

@stevespringett stevespringett added the cap: cryptography Capability: Cryptography (CBOM) label Jan 2, 2026
Copy link
Contributor

@bhess bhess left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for highlighting this issue, @Mehrn0ush. Please see my inline comment, it seems to be a typo that caused the duplicate.

@Mehrn0ush Mehrn0ush force-pushed the fix/crypto-registry-blake2-dup branch from 4e67374 to f2a2652 Compare January 5, 2026 16:29
Copy link
Contributor

@bhess bhess left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@stevespringett stevespringett added the cap: cryptography-registry Capability: Cryptography Registry label Jan 8, 2026
"primitive": "ae"
},
{
"standard": [
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove this entry to avoid merge conflicts with your other PR introducing AES-GCM-SIV

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR addresses data quality issues in the Cryptography Registry by removing a duplicate BLAKE2b-HMAC variant and correcting several other typos and omissions.

Changes:

  • Removed duplicate BLAKE2b-HMAC variant entry by changing it to BLAKE2s-HMAC
  • Added missing AES-GCM-SIV variant with RFC 8452 standard reference
  • Fixed TUAC typo to TUAK in two pattern definitions
  • Fixed bcrypt pattern syntax error (parenthesis to brace)

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +344 to 353
"name": "RFC 8452",
"url": "https://doi.org/10.17487/RFC8452"
}
],
"pattern": "AES[-(128|192|256)]-GCM-SIV[-{tagLength}][-{ivLength}]",
"primitive": "ae"
},
{
"standard": [
{
Copy link

Copilot AI Jan 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The addition of AES-GCM-SIV variant is not mentioned in the PR description or related issue #752, which specifically states 'Cryptography Registry data only' and focuses on removing the BLAKE2b-HMAC duplicate. This unrelated change should either be removed from this PR or documented in the PR description with justification.

Suggested change
"name": "RFC 8452",
"url": "https://doi.org/10.17487/RFC8452"
}
],
"pattern": "AES[-(128|192|256)]-GCM-SIV[-{tagLength}][-{ivLength}]",
"primitive": "ae"
},
{
"standard": [
{

Copilot uses AI. Check for mistakes.
"variant": [
{
"pattern": "TUAC[-MAC]",
"pattern": "TUAK[-MAC]",
Copy link

Copilot AI Jan 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The correction from TUAC to TUAK is not mentioned in the PR description or related issue #752, which states 'No schema or specification behavior changes' and focuses on removing the BLAKE2b-HMAC duplicate. This unrelated fix should either be removed from this PR or documented in the PR description.

Copilot uses AI. Check for mistakes.
},
{
"pattern": "TUAC[-KDF]",
"pattern": "TUAK[-KDF]",
Copy link

Copilot AI Jan 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The correction from TUAC to TUAK is not mentioned in the PR description or related issue #752. This unrelated fix should either be removed from this PR or documented in the PR description.

Copilot uses AI. Check for mistakes.
"variant": [
{
"pattern": "bcrypt[-{cost)]",
"pattern": "bcrypt[-{cost}]",
Copy link

Copilot AI Jan 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The correction from 'bcrypt[-{cost)]' to 'bcrypt[-{cost}]' (fixing the mismatched parenthesis/brace) is not mentioned in the PR description or related issue #752. This unrelated fix should either be removed from this PR or documented in the PR description.

Copilot uses AI. Check for mistakes.
}
]
},
},
Copy link

Copilot AI Jan 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trailing whitespace has been added after the closing brace. This should be removed to maintain consistent formatting.

Suggested change
},
},

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cap: cryptography Capability: Cryptography (CBOM) cap: cryptography-registry Capability: Cryptography Registry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Defect]: Duplicate BLAKE2b-HMAC variant in Cryptography Registry

3 participants