Skip to content

feat: encrypted JSON should use the new EQL schema#213

Closed
freshtonic wants to merge 22 commits into
mainfrom
feat/eql/enc-json-use-updated-schema
Closed

feat: encrypted JSON should use the new EQL schema#213
freshtonic wants to merge 22 commits into
mainfrom
feat/eql/enc-json-use-updated-schema

Conversation

@freshtonic

Copy link
Copy Markdown
Contributor

The new EQL schema payload corresponds to this Rust type:

#[derive(Debug, Deserialize, Serialize)]
pub struct EqlEncrypted {
        #[serde(rename = "c", with = "option_mp_base85")]
        ciphertext: Option<EncryptedRecord>,
        #[serde(rename = "i")]
        identifier: Identifier,
        #[serde(rename = "v")]
        version: u16,

        #[serde(rename = "o")]
        ore_index: Option<Vec<String>>,
        #[serde(rename = "m")]
        match_index: Option<Vec<u16>>,
        #[serde(rename = "u")]
        unique_index: Option<String>,

        #[serde(rename = "s")]
        selector: Option<String>,

        #[serde(rename = "b")]
        blake3_index: Option<String>,

        #[serde(rename = "ocf")]
        ore_cclw_fixed_index: Option<String>,
        #[serde(rename = "ocv")]
        ore_cclw_var_index: Option<String>,

        #[serde(rename = "sv")]
        ste_vec_index: Option<Vec<EqlEncrypted>>,
    }

Acknowledgment

By submitting this pull request, I confirm that CipherStash can use, modify, copy, and redistribute this contribution, under the terms of CipherStash's choice.

@freshtonic freshtonic force-pushed the feat/eql/enc-json-use-updated-schema branch from fd53799 to ba18f22 Compare April 30, 2025 07:05
@freshtonic freshtonic marked this pull request as ready for review April 30, 2025 07:07
@freshtonic freshtonic force-pushed the feat/eql/enc-json-use-updated-schema branch from ba18f22 to e893995 Compare April 30, 2025 11:51

@tobyhede tobyhede left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we add tests for the format?
Or cover with comprehensive integration tests?

@freshtonic freshtonic force-pushed the feat/eql/enc-json-use-updated-schema branch from e893995 to d1aba17 Compare May 1, 2025 04:54
@freshtonic freshtonic force-pushed the feat/eql/enc-json-use-updated-schema branch 3 times, most recently from 42f2d83 to 74a21af Compare May 5, 2025 06:49
@freshtonic freshtonic force-pushed the feat/eql/enc-json-use-updated-schema branch from 3c20b44 to 1cbd8c5 Compare May 8, 2025 13:56
@freshtonic

Copy link
Copy Markdown
Contributor Author

Closing in favour of #222

@freshtonic freshtonic closed this May 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants