# MinIO Security Overview [![Slack](https://slack.min.io/slack?type=svg)](https://slack.min.io)

## Server-Side Encryption

MinIO supports two different types of server-side encryption ([SSE](#sse)):

- **SSE-C**: The MinIO server en/decrypts an object with a secret key provided by the S3 client as part of the HTTP request headers. Therefore, [SSE-C](#ssec) requires TLS/HTTPS.

        // When/Then
        assertDoesNotThrow(() -> {
            PropertyConfiguration testConfig = new PropertyConfiguration(props);
            // Configuration should handle inconsistent min/max versions
            assertNotNull(testConfig.getMinimumVersion());
            assertNotNull(testConfig.getMaximumVersion());
        });
    }

    @Test

- **Small PRs**: Easier to review, faster to merge. Split large changes logically.
- **Clear Commits**: Use `git rebase -i` to refine history before submitting.
- **Engage Early**: Discuss complex changes in issues or Slack (https://slack.min.io) before coding.
- **Be Responsive**: Address reviewer feedback promptly to keep PRs moving.
- **Learn from Reviews**: Use feedback to improve future contributions.

## Resources

import static com.google.common.collect.CompactHashing.UNSET;
import static com.google.common.collect.Hashing.smearedHash;
import static java.lang.Math.max;
import static java.lang.Math.min;
import static java.util.Objects.requireNonNull;

import com.google.common.annotations.GwtIncompatible;
import com.google.common.annotations.J2ktIncompatible;
import com.google.common.annotations.VisibleForTesting;

        // 1 ms = 10,000 * 100ns intervals
        long intervals = timeoutMs * 10000L;
        // MS-SMB2 timeout field is 4 bytes (uint32), so clamp to max value
        return Math.min(intervals, 0xFFFFFFFFL);
    }

    /**
     * Get the flags
     * @return the flags
     */
    public int getFlags() {
        return flags;
    }

    /**

        regA(builder);
        return builder;
    }

    protected MinAggregationBuilder regMinA(String name, String field) {
        MinAggregationBuilder builder = AggregationBuilders.min(name).field(field);
        regA(builder);
        return builder;
    }

    protected SumAggregationBuilder regSumA(String name, String field) {

     */
    public Smb2QueryDirectoryRequest(final Configuration config, final byte[] fileId) {
        super(config, SMB2_QUERY_DIRECTORY);
        this.outputBufferLength =
                Math.min(config.getMaximumBufferSize(), config.getListSize()) - Smb2QueryDirectoryResponse.OVERHEAD & ~0x7;
        this.fileId = fileId;
    }

    /**
     * {@inheritDoc}
     *

        byte[] enc = constant;
        int klen = keybytes.length;
        byte[] dk = new byte[klen];
        for (int n = 0; n < klen;) {
            byte[] block = cipher.doFinal(enc);
            int len = Math.min(klen - n, block.length);
            System.arraycopy(block, 0, dk, n, len);
            n += len;
            enc = block;
        }
        return dk;
    }

    /**

	return
}

const (
	// Kubernetes deployment doc link.
	kubernetesDeploymentDoc = "https://docs.min.io/community/minio-object-store/operations/deployments/kubernetes.html"

	// Mesos deployment doc link.
	mesosDeploymentDoc = "https://docs.min.io/community/minio-object-store/operations/deployments/kubernetes.html"
)

func getDownloadURL(releaseTag string) (downloadURL string) {

                        Math.min(th.getConfig().getReceiveBufferSize() - 70, th.areSignaturesActive() ? 0xFFFF - 70 : 0xFFFFFF - 70);
            }

            // there seems to be a bug with some servers that causes corruption if using signatures + CAP_LARGE_WRITE
            if (th.hasCapability(SmbConstants.CAP_LARGE_WRITEX) && !th.areSignaturesActive()) {