How to set aad with 'transit' encryption

takaaki7 · August 15, 2022, 9:08am

I cannot find interface to set AAD when encrypt data with transit.

As I see the code, ‘SymmetricOpts’ has the field ‘AdditionalData’ but noone set this.

hashicorp/vault/blob/34225943c5a3ff60c9be14dc8522862023af5d9b/sdk/helper/keysutil/policy.go#L883


      
          			return "", errutil.InternalError{Err: "could not derive enc key, length not correct"}
          		}
          		if deriveHMAC {
          			hmacKey = key[encBytes:]
          			if len(hmacKey) != hmacBytes {
          				return "", errutil.InternalError{Err: "could not derive hmac key, length not correct"}
          			}
          		}
          
          
		ciphertext, err = p.SymmetricEncryptRaw(ver, encKey, plaintext,
          			SymmetricOpts{
          				Convergent: p.ConvergentEncryption,
          				HMACKey:    hmacKey,
          				Nonce:      nonce,
          			})
          
          
		if err != nil {
          			return "", err
          		}
          	case KeyType_RSA2048, KeyType_RSA3072, KeyType_RSA4096:
          		keyEntry, err := p.safeGetKeyEntry(ver)