Closed btall closed 2 weeks ago
Currently, django-fernet-encrypted-fields uses Django's SECRET_KEY or a unique key defined in SALT_KEY for encryption.
SECRET_KEY
SALT_KEY
However, rotating encryption keys is an important security practice that doesn't seem to be supported by django-secured-fields.
So I wonder if there are any plans to implement a mechanism similar to django-fernet-encrypted-fields for managing multiple encryption keys: https://django-fernet-fields.readthedocs.io/en/latest/#keys
Hello, thank you for raising the issue. I believe we can address it. While I cannot provide you a timeline atm, I will ensure that it is implemented. Thanks!
Hi @btall, Thanks for waiting! Just wanna let you know that this was finally implemented and released in v0.4.4!
Hi @earthpyy, Thank you for the update! I am glad to hear that it has been implemented and released in v0.4.4. Looking forward to checking it out!
Currently, django-fernet-encrypted-fields uses Django's
SECRET_KEY
or a unique key defined inSALT_KEY
for encryption.However, rotating encryption keys is an important security practice that doesn't seem to be supported by django-secured-fields.
So I wonder if there are any plans to implement a mechanism similar to django-fernet-encrypted-fields for managing multiple encryption keys: https://django-fernet-fields.readthedocs.io/en/latest/#keys