Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SIP for key rotation #601

Open
andresuribe87 opened this issue Jul 26, 2023 · 0 comments
Open

SIP for key rotation #601

andresuribe87 opened this issue Jul 26, 2023 · 0 comments

Comments

@andresuribe87
Copy link
Contributor

Production deployments are expected to use a KEK for encrypting private keys under the service's custody, and a DEK for app level encryption of all data written to storage. Both of these encryption keys should support key rotation. The first step is to come up with a proposal for handling key rotation, in the form of a SIP

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
No open projects
Status: 🆕 New
Development

No branches or pull requests

2 participants