Azure/azure-sdk-for-java com.azure+azure-storage-blob-cryptography_12.34.2

on GitHub

12.34.2 (2026-08-26)

Bugs Fixed

• Fixed a bug where client-side encryption 2.0 could not detect a rearrangement of otherwise-untampered authenticated regions in blob content. This is now detected and an exception is thrown. For data recovery purposes, this behavior can be reverted by setting the AZURE_STORAGE_CSE_V2_ALLOW_MISORDERED_AUTH_REGIONS environment variable (or the Azure.Storage.CseV2AllowMisorderedAuthRegions system property) to true.
• Fixed an issue where the client-side encryption (v2) region nonce counter was truncated to 32 bits, which could
  cause GCM nonce reuse for blobs exceeding 2^32 authenticated regions. The full 64-bit region index is now used so
  every region receives a unique nonce. Blobs with at most 2^31 authenticated regions remain byte-for-byte compatible;
  subsequent regions now use the corrected 64-bit encoding.