mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-12 03:48:56 +00:00
Fernet (AES-128-CBC + HMAC-SHA256) is not an approved construction for the FIPS 140-3 image. Plugin session claims now use AES-256-GCM through a key-taking pair (encrypt_aes_gcm_with_key / decrypt_aes_gcm_with_key) that the existing _encrypt_aes_gcm / _decrypt_aes_gcm wrappers delegate to, keyed by the unchanged HMAC-SHA256(LITELLM_SALT_KEY, plugin_name) per-plugin key. Claims live 30 seconds so no Fernet read-compatibility window is kept. Resolves LIT-8428 Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| _guardrail_opt_out.py | ||
| test_access_group_model_listing.py | ||
| test_bedrock_passthrough_model_access.py | ||
| test_jwt_default_team_provisioning.py | ||
| test_jwt_mapped_key_email_backfill.py | ||
| test_key_guardrail_opt_out.py | ||
| test_key_guardrail_opt_out_chaos.py | ||
| test_key_guardrail_opt_out_runtime.py | ||
| test_object_permission_lookup.py | ||
| test_plugin_session_claim.py | ||
| test_warmed_policy.py | ||