Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HashiCorp Vault Secret barrier encryption: Is there plan to make it configurable? #28805

Open
sumanaps opened this issue Oct 30, 2024 · 0 comments

Comments

@sumanaps
Copy link

HashiCorp Vault Secret barrier encryption is based on ‘256-bit Advanced Encryption Standard (AES)’. This seems to be fixed one as per current support. Is there plan to make this configurable, in case any other encryption mechanism is needed?

Reference: Security Model | Vault | HashiCorp Developer 2
"The storage backends used by Vault are also untrusted by design. Vault uses a security barrier for all requests made to the backend. The security barrier automatically encrypts all data leaving Vault using a 256-bit Advanced Encryption Standard (AES) cipher in the Galois Counter Mode (GCM) with 96-bit nonces. The nonce is randomly generated for every encrypted object. When data is read from the security barrier, the GCM authentication tag is verified during the decryption process to detect any tampering.

https://discuss.hashicorp.com/t/hashicorp-vault-secret-barrier-encryption-is-there-plan-to-make-it-configurable/70793/1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants