Skip to content

Add encryption key helpers for confidential-http#108

Draft
nadahalli wants to merge 2 commits intomainfrom
tejaswi/encryption-key-helpers
Draft

Add encryption key helpers for confidential-http#108
nadahalli wants to merge 2 commits intomainfrom
tejaswi/encryption-key-helpers

Conversation

@nadahalli
Copy link
Collaborator

Summary

  • Adds DeriveEncryptionKey, NewEncryptedRequest, and DecryptResponseBody helpers to the confidentialhttp package
  • HKDF-SHA256 derives a 32-byte AES key from a user passphrase, eliminating manual key generation
  • Cross-language test vector ensures interoperability with the TypeScript SDK

@nadahalli nadahalli requested review from a team as code owners February 18, 2026 14:12
@github-actions
Copy link

👋 nadahalli, thanks for creating this pull request!

To help reviewers, please consider creating future PRs as drafts first. This allows you to self-review and make any final changes before notifying the team.

Once you're ready, you can mark it as "Ready for review" to request feedback. Thanks!

@nadahalli nadahalli marked this pull request as draft February 18, 2026 14:19
The response is what gets encrypted, not the request.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant