Encrypt realm data with dek which is encrypted with kek. The signing keys are also encrypted with the kek.

This commit is contained in:
eelke 2026-02-26 16:53:02 +01:00
parent 644b005f2a
commit 650fe99990
36 changed files with 399 additions and 129 deletions

View file

@ -1,6 +1,8 @@
using Microsoft.EntityFrameworkCore;
namespace IdentityShroud.Core.Contracts;
namespace IdentityShroud.Core.Security;
[Owned]
public record EncryptedValue(string KeyId, byte[] Value);
public record EncryptedValue(DekId DekId, byte[] Value);