IdentityShroud/IdentityShroud.Core/Security/EncryptedValue.cs

using Microsoft.EntityFrameworkCore;

namespace IdentityShroud.Core.Security;

[Owned]
public record EncryptedValue(DekId DekId, byte[] Value);
Support rotation of master key. The EncryptionService now loads a set of keys and uses the active one to encrypt and selects key based on keyid during decryption. Introduced EncryptedValue to hold keyId and encrypted data. (There are no intermeddiate keys yet) 2026-02-24 06:32:58 +01:00			`using Microsoft.EntityFrameworkCore;`

Encrypt realm data with dek which is encrypted with kek. The signing keys are also encrypted with the kek. 2026-02-26 16:53:02 +01:00			`namespace IdentityShroud.Core.Security;`
Support rotation of master key. The EncryptionService now loads a set of keys and uses the active one to encrypt and selects key based on keyid during decryption. Introduced EncryptedValue to hold keyId and encrypted data. (There are no intermeddiate keys yet) 2026-02-24 06:32:58 +01:00
			`[Owned]`
Encrypt realm data with dek which is encrypted with kek. The signing keys are also encrypted with the kek. 2026-02-26 16:53:02 +01:00			`public record EncryptedValue(DekId DekId, byte[] Value);`