GetObject failed while using sse-customer-key

[praveenraj2018]

Hi,

I was trying to get-object using GO SDK, which was sse-customer-key encrypted at the other end through Java SDK. I have the encrypt key as well as the sse-customer-algorithm which is AES256.

Below are the two steps:

1. Put-object with Java SDK using SSE-customer key

encKey = "avLa1ns38S8wiJ6qFMN/iuk6aMkpr4c3tUdnD7HlCLV="

PutObjectRequest putObjectRequest = new PutObjectRequest
{
  BucketName = "meta-data",
  Key = "D2024-08-27.tsv",
  ServerSideEncryptionCustomerMethod = ServerSideEncryptionCustomerMethod.AES256,
  ServerSideEncryptionCustomerProvidedKey = encKey
};
return await client.PutObjectAsync(putObjectRequest);

2. Get-object with GO SDK using the same key.

ck := "avLa1ns38S8wiJ6qFMN/iuk6aMkpr4c3tUdnD7HlCLV="

response, err := client.GetObject(context.TODO(), &s3.GetObjectInput{
	Bucket: aws.String("meta-data"),
	Key:    aws.String("D2024-08-27.tsv"),
	SSECustomerAlgorithm: aws.String("AES256"),
	SSECustomerKey: aws.String(ck),
})

The return the following error:

operation error S3: GetObject, https response error StatusCode: 400, RequestID: 1725264284637798, HostID: 12925979, api error InvalidArgument: The secret key was invalid for the specified algorithm.

It does look like the key (format) is in the wrong format!
Can anyone please point out what is wrong here?

thanks
Praveen