eelke
07393f57fc
Added the use of DEK's for encryption of secrets. Both the KEK's and DEK's are stored in a way that you can have multiple key of which one is active. But the others are still available for decrypting. This allows for implementing key rotation. Co-authored-by: eelke <eelke@eelkeklein.nl> Co-authored-by: Eelke76 <31384324+Eelke76@users.noreply.github.com> Reviewed-on: #6
10 lines
351 B
C#
10 lines
351 B
C#
namespace IdentityShroud.Core.Security;
|
|
|
|
/// <summary>
|
|
/// Contains a KEK and associated relevant data. This structure
|
|
/// </summary>
|
|
/// <param name="Id"></param>
|
|
/// <param name="Active"></param>
|
|
/// <param name="Algorithm"></param>
|
|
/// <param name="Key"></param>
|
|
public record KeyEncryptionKey(KekId Id, bool Active, string Algorithm, byte[] Key);
|