AES-256-GCM IV is 16 bytes, but 12 bytes is standard?

[sbking]

Regarding the database encryption using aes-256-gcm, the initialization vector is 16 bytes: https://github.com/boxyhq/jackson/blob/main/npm/src/db/encrypter.ts#L8

But every resource I can find suggests you should stick to the standard of 12 bytes for the IV. For example see MDN: https://developer.mozilla.org/en-US/docs/Web/API/AesGcmParams#iv

[deepakprabhakara]

@sbking You are right, 16 bytes doesn't throw an error and will hash to 12 bytes internally. We'll modify it to use 12 bytes, it shouldn't affect already encrypted data since the iv is stored and read back from the record during decryption.

[deepakprabhakara]

Fixed in https://github.com/boxyhq/jackson/releases/tag/v1.28.1