# Plugin cipher (Deterministic encryption + iv\_random\_length)

**URL:** <https://discuss.elastic.co/t/plugin-cipher-deterministic-encryption-iv-random-length/236856>\
**Category:** Logstash\
**Created:** [June 12, 2020, 9:20am UTC](https://discuss.elastic.co/t/plugin-cipher-deterministic-encryption-iv-random-length/236856 "2020-06-12T09:20:37Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Florent\_Fauvin](https://avatars.discourse-cdn.com/v4/letter/f/d2c977/32.png) [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\
**Post date:** [June 12, 2020, 9:20am UTC](https://discuss.elastic.co/t/plugin-cipher-deterministic-encryption-iv-random-length/236856/1 "2020-06-12T09:20:37Z")

</div>

Hello,

I would like to do "deterministic encryption" with the cipher plugin, which requires not to have a "random iv".

Unfortunately, even if the official documentation says that the "iv\_random\_length" parameter is not a requiered parameter, I think that it is:

```
[ERROR] 2020-06-12 11: 12: 44.931 [Converge PipelineAction :: Create <main>] cipher - Missing a required setting for the cipher filter plugin:

   filter {
     cipher {
       iv_random_length => # SETTING MISSING
       ...
     }
   }

```

=\> Can you tell me if I'm right ? And if not, which ciphers can be used to omit this parameter ?

Thank you so much,

Florent

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [June 12, 2020, 2:30pm UTC](https://discuss.elastic.co/t/plugin-cipher-deterministic-encryption-iv-random-length/236856/2 "2020-06-12T14:30:31Z")

</div>

> [@Florent\_Fauvin](#):
>
> Unfortunately, even if the official documentation says that the "iv\_random\_length" parameter is not a requiered parameter, I think that it is

In the filter [source code](https://github.com/logstash-plugins/logstash-filter-cipher/blob/abc58e5a09ba0bb18bb99d532e994a7533368212/lib/logstash/filters/cipher.rb#L100) it is tagged as required, so the documentation is wrong.

---

<div class="post-metadata">

**Author:** ![Florent\_Fauvin](https://avatars.discourse-cdn.com/v4/letter/f/d2c977/32.png) [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\
**Post date:** [June 12, 2020, 2:33pm UTC](https://discuss.elastic.co/t/plugin-cipher-deterministic-encryption-iv-random-length/236856/3 "2020-06-12T14:33:58Z")

</div>

Thank you !!!  
When the documentation is false, we think we are doing wrong, and therefore we waste our time trying to make it work ...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 10, 2020, 2:46pm UTC](https://discuss.elastic.co/t/plugin-cipher-deterministic-encryption-iv-random-length/236856/4 "2020-07-10T14:46:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.