-
Currently we support a variety of different signers, including Fulcio and Vault PKI, but these all will result in private key material being loaded into memory to sign data locally.
We should be ab…
-
For file validation purposes, we'd love a way to "dry-run" a decrypt, so that given e.g. a sops-encrypted YAML file; everything that *would* be decrypted, would instead be replaced with `*********`
…
-
**Help us help you**
We are using Tink extensively to provide encryption for calls through out GRPC proxy as part of our platform offering.
**Is your feature request related to a problem?**
T…
-
## Description
The `agglayer-signer` needs to be tested (even a little) to acknowledge its behaviors.
Refactorization in the scope of the `agglayer-signer` and other `agglayer` crates are ok for thi…
-
## Hello!
- Vote on this issue by adding a 👍 reaction
- If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)
## Issue details
…
-
**Is your feature request related to a problem? Please describe.**
Seems that every major cloud is supported for (un)sealing via its native KMS ( Azure, AWS, GCP, etc ), but there is no support for O…
-
**Is your feature request related to a problem? Please describe.**
The ciphertext format returned by the transit engine is of the format
vault:v1:. We would like the "vault" prefix be customizable…
-
### Community Note
* When creating VM instances with CMEK is failing to create stating
Constraint constraints/gcp.restrictNonCmekServices violated for project attempting to create a resource not…
-
The SDK should:
* Decouple DID generation from Key Generation.
* Let users of the library bring their signers, likely in the form of an HSM.
* Have key generation be explicitly something that disco…
-
`sops -e` will run with a broken config (only when the creation_rule is a map, `- blah:` works, `-blah` doesn't) and not save a master key.
```
$ cat .sops.yaml
creation_rules:
- blah:
$ cat…