Kms

Empty-ciphertext panic in aws-encryption-provider (CVD with AWS)

A two-byte gRPC request crashed AWS’s Kubernetes KMS plugin. Coordinated disclosure with AWS VDP; fix merged as aws-encryption-provider#169.