eelke/IdentityShroud
1
0
Fork 0
Code Issues 4 Pull requests Projects Releases Packages Wiki Activity Actions
30 commits 4 branches 0 tags 336 KiB
Commit graph

4 commits

Author SHA1 Message Date
eelke
650fe99990 Encrypt realm data with dek which is encrypted with kek. The signing keys are also encrypted with the kek. 2026-02-26 19:46:14 +01:00
eelke
644b005f2a Support rotation of master key. 
The EncryptionService now loads a set of keys and uses the active one to encrypt and selects key based on keyid during decryption. Introduced EncryptedValue to hold keyId and encrypted data.

(There are no intermeddiate keys yet)
 2026-02-24 06:32:58 +01:00
eelke
3e5ce9d81d EncryptionService should be using ISecretProvider 
Remove Async from method that was not Async
 2026-02-15 19:18:02 +01:00
eelke
92b34bd0b5 Happy flow for creating realms works 
But needs more validating...
 2026-02-08 11:57:57 +01:00