opentdf / platform

OpenTDF Platform monorepo enabling the development and integration of _forever control_ of data into new and existing applications. The concept of forever control stems from an increasingly common concept known as zero trust.
BSD 3-Clause Clear License
15 stars 4 forks source link

feat(sdk): Support custom key splits #1038

Open dmihalcik-virtru opened 6 days ago

dmihalcik-virtru commented 6 days ago

Implementation of https://github.com/opentdf/spec/pull/32

This is a proposal to allow customizing how a client shares key data across multiple KASes. With a split, you can copy the same share to multiple providers, allowing for robustness if a given KAS is unavailable - or if a decrypting user or application does not have authorization with that KAS.