Skip to content

Commit 6c3694d

Browse files
committed
remove data key from Raw/Encrypted/DataKey repr
1 parent 5f9068d commit 6c3694d

File tree

2 files changed

+22
-2
lines changed

2 files changed

+22
-2
lines changed

src/aws_encryption_sdk/structures.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ class RawDataKey(object):
7575
"""
7676

7777
key_provider = attr.ib(hash=True, validator=attr.validators.instance_of(MasterKeyInfo))
78-
data_key = attr.ib(hash=True, validator=attr.validators.instance_of(bytes))
78+
data_key = attr.ib(hash=True, repr=False, validator=attr.validators.instance_of(bytes))
7979

8080

8181
@attr.s(hash=True)
@@ -89,7 +89,7 @@ class DataKey(object):
8989
"""
9090

9191
key_provider = attr.ib(hash=True, validator=attr.validators.instance_of(MasterKeyInfo))
92-
data_key = attr.ib(hash=True, validator=attr.validators.instance_of(bytes))
92+
data_key = attr.ib(hash=True, repr=False, validator=attr.validators.instance_of(bytes))
9393
encrypted_data_key = attr.ib(hash=True, validator=attr.validators.instance_of(bytes))
9494

9595

test/unit/test_structures.py

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -84,3 +84,23 @@ def test_master_key_info_convert(kwargs, attribute, expected_value):
8484
test = MasterKeyInfo(**kwargs)
8585

8686
assert getattr(test, attribute) == expected_value
87+
88+
89+
@pytest.mark.parametrize("cls, params", (
90+
(DataKey, ("key_provider", "data_key", "encrypted_data_key")),
91+
(RawDataKey, ("key_provider", "data_key")),
92+
(EncryptedDataKey, ("key_provider", "encrypted_data_key"))
93+
))
94+
def test_data_key_repr_str(cls, params):
95+
data_key = b"plaintext data key ioasuwenvfiuawehnviuawh\x02\x99sd"
96+
encrypted_data_key = b"encrypted data key josaidejoawuief\x02\x99sd"
97+
base_params = dict(
98+
key_provider=MasterKeyInfo(provider_id="asdf", key_info=b"fdsa"),
99+
data_key=data_key,
100+
encrypted_data_key=encrypted_data_key
101+
)
102+
test = cls(**{key: base_params[key] for key in params})
103+
data_key_check = repr(data_key)[2:-1]
104+
105+
assert data_key_check not in str(test)
106+
assert data_key_check not in repr(test)

0 commit comments

Comments
 (0)