5-improve-encrypted-storage #6

Merged
eelke merged 17 commits from 5-improve-encrypted-storage into main 2026-02-27 17:57:44 +00:00

17 commits

Author SHA1 Message Date
eelke
d8f6024afd Cleanup 2026-02-27 18:54:01 +01:00
eelke
1cd7fb659a Improve test coverage 2026-02-27 18:50:28 +01:00
eelke
ccc00d8e80 Pass Span instead of Memory 2026-02-26 20:41:59 +01:00
eelke
650fe99990 Encrypt realm data with dek which is encrypted with kek. The signing keys are also encrypted with the kek. 2026-02-26 19:46:14 +01:00
eelke
644b005f2a Support rotation of master key.
The EncryptionService now loads a set of keys and uses the active one to encrypt and selects key based on keyid during decryption. Introduced EncryptedValue to hold keyId and encrypted data.

(There are no intermeddiate keys yet)
2026-02-24 06:32:58 +01:00
eelke
4201d0240d Improve the binary storage format of encrypted secrets. Move the related code from AesGcmHelper into the EncryptionService. 2026-02-22 19:11:17 +01:00
eelke
ac08956339 No codecov (AI was over eager) just show the numbers in github. 2026-02-22 11:30:54 +01:00
eelke
21b53ff5b3 Fix injection of encryption secret 2026-02-22 09:58:20 +01:00
eelke
c2a2184353 Another reference fix 2026-02-22 09:49:10 +01:00
eelke
4b493ee28d Fix library reference 2026-02-22 09:46:09 +01:00
eelke
72dbc5acbf Add github job to run tests 2026-02-22 09:39:43 +01:00
Eelke76
ad2e952125
Merge pull request #1 from Eelke76/client-service-and-api
client-service-and-api
2026-02-22 09:31:43 +01:00
eelke
e0f6f3f8a9 Cleanup 2026-02-22 09:28:05 +01:00
eelke
3d73a9914c Tests voor client api and service 2026-02-22 09:27:57 +01:00
eelke
cd2ec646fd Add some tests 2026-02-22 08:21:54 +01:00
eelke
0c6f227049 Reworked code around signing keys have key details much more isolated from the other parts of the program. 2026-02-21 20:15:46 +01:00
eelke
eb872a4f44 WIP making ClientCreate endpoint 2026-02-20 17:35:38 +01:00