Skip to content

feat: encrypted JSON should use the new EQL schema #213

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 5 commits into
base: main
Choose a base branch
from

Conversation

freshtonic
Copy link
Contributor

The new EQL schema payload corresponds to this Rust type:

#[derive(Debug, Deserialize, Serialize)]
pub struct EqlEncrypted {
        #[serde(rename = "c", with = "option_mp_base85")]
        ciphertext: Option<EncryptedRecord>,
        #[serde(rename = "i")]
        identifier: Identifier,
        #[serde(rename = "v")]
        version: u16,

        #[serde(rename = "o")]
        ore_index: Option<Vec<String>>,
        #[serde(rename = "m")]
        match_index: Option<Vec<u16>>,
        #[serde(rename = "u")]
        unique_index: Option<String>,

        #[serde(rename = "s")]
        selector: Option<String>,

        #[serde(rename = "b")]
        blake3_index: Option<String>,

        #[serde(rename = "ocf")]
        ore_cclw_fixed_index: Option<String>,
        #[serde(rename = "ocv")]
        ore_cclw_var_index: Option<String>,

        #[serde(rename = "sv")]
        ste_vec_index: Option<Vec<EqlEncrypted>>,
    }

Acknowledgment

By submitting this pull request, I confirm that CipherStash can use, modify, copy, and redistribute this contribution, under the terms of CipherStash's choice.

@freshtonic freshtonic force-pushed the feat/eql/enc-json-use-updated-schema branch from fd53799 to ba18f22 Compare April 30, 2025 07:05
@freshtonic freshtonic marked this pull request as ready for review April 30, 2025 07:07
@freshtonic freshtonic force-pushed the feat/eql/enc-json-use-updated-schema branch from ba18f22 to e893995 Compare April 30, 2025 11:51
Copy link
Contributor

@tobyhede tobyhede left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we add tests for the format?
Or cover with comprehensive integration tests?

@freshtonic freshtonic force-pushed the feat/eql/enc-json-use-updated-schema branch from e893995 to d1aba17 Compare May 1, 2025 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants