{"action":"closed","issue":{"url":"https://api.github.com/repos/pyca/cryptography/issues/1810","labels_url":"https://api.github.com/repos/pyca/cryptography/issues/1810/labels{/name}","comments_url":"https://api.github.com/repos/pyca/cryptography/issues/1810/comments","events_url":"https://api.github.com/repos/pyca/cryptography/issues/1810/events","html_url":"https://github.com/pyca/cryptography/issues/1810","id":65965504,"number":1810,"title":"MultiFernet docs can be misleading","user":{"login":"tlynn","id":329026,"avatar_url":"https://avatars.githubusercontent.com/u/329026?v=3","gravatar_id":"","url":"https://api.github.com/users/tlynn","html_url":"https://github.com/tlynn","followers_url":"https://api.github.com/users/tlynn/followers","following_url":"https://api.github.com/users/tlynn/following{/other_user}","gists_url":"https://api.github.com/users/tlynn/gists{/gist_id}","starred_url":"https://api.github.com/users/tlynn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tlynn/subscriptions","organizations_url":"https://api.github.com/users/tlynn/orgs","repos_url":"https://api.github.com/users/tlynn/repos","events_url":"https://api.github.com/users/tlynn/events{/privacy}","received_events_url":"https://api.github.com/users/tlynn/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/pyca/cryptography/labels/administrative","name":"administrative","color":"d4c5f9"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-02T16:42:37Z","updated_at":"2015-04-03T15:31:54Z","closed_at":"2015-04-03T15:31:54Z","body":"The MultiFernet docs aren't clear on which keys are used for encryption (the first) or which are required for decryption (the one used for encryption). This lack of clarity could result in lost/irreversibly encrypted data.  A reasonable assumption from the current docs (\"Decryption supports using *any* of constituent keys\") is that a token encrypted using a MultiFernet can be decrypted by \"any of [the] constituent keys\" that were used during encryption.\r\n\r\nThe docs could just say that this is a wrapper around a list of Fernets that uses the first key for encryption and tries each key in turn for decryption."}}