Reworked code around signing keys have key details much more isolated from the other parts of the program.

IdentityShroud.Core/Services/EncryptionService.cs

@@ -20,7 +20,7 @@ public class EncryptionService : IEncryptionService
         return AesGcmHelper.EncryptAesGcm(plain, encryptionKey);
     }
 
-    public byte[] Decrypt(byte[] cipher)
+    public byte[] Decrypt(ReadOnlyMemory<byte> cipher)
     {
         return AesGcmHelper.DecryptAesGcm(cipher, encryptionKey);
     }