search

confidential-containers / simple-kbs

Key Broker Server for SEV(-ES)
Apache License 2.0
12 stars 13 forks source link

HSM/Keyvault integration #3

Open fitzthum opened 2 years ago

fitzthum commented 2 years ago

Secrets are currently stored in the database. We should also support storing secrets in an external keyvault or HSM. The secret table in the database should either store a secret or a pointer to a secret stored somewhere else.

dunnderr commented 2 years ago

Is there a perferred format that we want to standardize for theentry to the external key vault or HSM? I am thinking that it would be straightforward to use a URI. Do you guys have something different in mind?

ariel-adam commented 1 year ago

@fitzthum is this issue still relevant or can be closed? If it's still relevant to what release do you think we should map it to (mid-November, end-December, mid-February etc...)?