Skip to content

Commit 4325afb

Browse files
CONN-38 Notes for 3.28.0 on PYTHON-1350 (#1167)
Co-authored-by: Jamie Gillenwater <jamie.gillenwater@datastax.com>
1 parent 50c93e9 commit 4325afb

File tree

1 file changed

+4
-12
lines changed

1 file changed

+4
-12
lines changed

docs/column_encryption.rst

Lines changed: 4 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -14,19 +14,11 @@ also available, although in this case values must be manually encrypted and/or d
1414
Client-side encryption and decryption should work against all versions of Cassandra and DSE. It does not
1515
utilize any server-side functionality to do its work.
1616

17-
WARNING: Consider upgrading to 3.28.0 or later
17+
WARNING: Encryption format changes in 3.28.0
1818
------------------------------------------------
19-
There is a significant issue with the column encryption functionality in Python driver 3.27.0.
20-
To be able to decrypt your data, you must preserve the cipher initialization vector (IV) used by
21-
the :class:`~.AES256ColumnEncryptionPolicy` when your data was written.
22-
To decrypt your data, you must supply this IV when creating a policy to read this data.
23-
If you do not supply this IV in the policy to read this data, you will **NOT BE ABLE TO DECRYPT YOUR DATA**.
24-
See
25-
`PYTHON-1350 <https://datastax-oss.atlassian.net/browse/PYTHON-1350>`_ for more detail.
26-
27-
DataStax recommends upgrading to Python driver 3.28.0 or later to avoid this issue. 3.28.0 or later manages the IV automatically.
28-
Because of this change in functionality, any encrypted data written in 3.27.0 will **NOT** be readable by 3.28.0 or later.
29-
After upgrading to Python driver 3.28.0 or later, it is critical that you re-encrypt your data with the new driver version.
19+
Python driver 3.28.0 introduces a new encryption format for data written by :class:`~.AES256ColumnEncryptionPolicy`.
20+
As a result, any encrypted data written by Python driver 3.27.0 will **NOT** be readable.
21+
If you upgraded from 3.27.0, you should re-encrypt your data with 3.28.0.
3022

3123
Configuration
3224
-------------

0 commit comments

Comments
 (0)