PYTHON-3053 Key Management API

[blink1073]

Depends on mongodb/libmongocrypt#375

[blink1073]

Test failures are being addressed in PYTHON-3286 and PYTHON-3319.

[ShaneHarvey]

A few final comments.

[ShaneHarvey]

I'm a little concerned this might lead to masking bugs where we expect to be sending (or returning) Binary but actually end up with UUID. Can we remove this now that we use uuid_representation=unspecified?

[blink1073]

Trying it out

[blink1073]

Hmm, the issue is actually coming from the expected event. We enforce that _ids given to create_data_key are of the type UUID, but the expected event wants a Binary _id. I don't see a precedent for altering the events, but it seems like that might be needed here.

[ShaneHarvey]

 [2022/06/29 21:48:53.819] FAIL: test_create_data_key_with_AWS_KMS_provider (test.test_encryption.TestUnifiedCreateDataKey) [2022/06/29 21:48:53.819] ---------------------------------------------------------------------- [2022/06/29 21:48:53.819] Traceback (most recent call last): ... [2022/06/29 21:48:53.819] self.test.assertIsInstance(value, permissible_types) [2022/06/29 21:48:53.819] AssertionError: UUID('55c9396c-0d87-4128-93b0-095b806818cb') is not an instance of (<class 'bson.binary.Binary'>, <class 'bytes'>)

We should fix these errors by making _KEY_VAULT_OPTS use unspecified UUID representation (the default) instead of STANDARD. The "data_key _id must be a UUID" check will need to be updated to check for Binary with UUID_SUBTYPE too.

Note that _DATA_KEY_OPTS should still keep using uuid_representation=STANDARD otherwise we may break b/c for encoding a schema_map that contains UUIDs. _KEY_VAULT_OPTS is only used internally so we are free to change it as we please.

[blink1073]

Done

[blink1073]

I updated the pymongocrypt dependency to point to the commit merging mongodb/libmongocrypt#375

[ShaneHarvey]

We should only accept Binary, never UUID here. Let's also update the return below:

- return Binary(data_key_id.bytes, subtype=UUID_SUBTYPE) + return data_key_id 

[blink1073]

Done